Thanks, your response is really good, but if we’re talking about the existing (long-running) children, the same can be accomplished from within
procmon.exe via the Process Tree action (Ctrl+T). From there, you can select a process and all its children, and multiple PIDs will indeed be OR’ed. What I’m asking about is a different use-case: consider I’m about to debug a batch file (.cmd), and the PID of its parent cmd.exe is already known while any child PIDs are not as the script hasn’t been run yet. In other words, I’m looking for a Linux strace equivalent.
