I want to track process creation on Windows, with their launching arguments, and from what I could see it is possible natively enabling event ID 4688, but I am having trouble processing what it is being logged. It is a single local machine, so I don't have anything fancy to analyze those event lo...