For example
event:Process.created.ONENOTE
action:remove [u'\\\\?\\HID#VID_03EB&PID_8411&MI_00&Col01#8&16148c6e&0&0000#{4d1e55b2-f16f-11cf-88cb-001111000030}']
(This HID Device is Touch Screen)
and
event:Process.destroyed.ONENOTE
action:attacah [u'\\\\?\\HID#VID_03EB&PID_8411&MI_00&Col01#8&16148c6e&0&0000#{4d1e55b2-f16f-11cf-88cb-001111000030}']
When I need to remove(or attach) the HID Device, I use program-DevManview-
but it take DevManview 3~4 sec to remove(or attach) the HID Device.
Too late.
So, I'm finding the way that remove(or attach) the HID Device faster than DevManview
I'm Sorry for my poor English
p.s-When DevManview remove(or attach) the HID Device, eventghost catch the log like below text
System.DeviceRemoved [u'\\\\?\\HID#VID_03EB&PID_8411&MI_00&Col01#8&16148c6e&0&0000#{4d1e55b2-f16f-11cf-88cb-001111000030}']
System.DeviceAttached [u'\\\\?\\HID#VID_03EB&PID_8411&MI_00&Col01#8&16148c6e&0&0000#{4d1e55b2-f16f-11cf-88cb-001111000030}']
