SO has a bit about using WMI to look up child processes <http://stackoverflow.com/a/5921994>. It does look quite a bit simpler than this.