Track the start of the windows process in the event log?

Question

Windows

How to track the launch of the trustedinstaller process in the event log?
The goal is to lower the priority of the process execution upon the fact of its launch

Answer 1

1. Enable audit in local policies "Computer Configuration" -> "Windows Policy" -> "Security" -> "Advanced Audit" -> "Detailed Tracking" -> "Audit Process Creation".
After that, events will appear in the Security section about starting processes, for example, No. 4688.
It remains to program the application / script that will respond to this event.