cmdline() added to process monitor