Add test for process_monitor.exe tool

[Alan-Jowett]

Description

This pull request introduces a new Process Monitor test in the CI/CD pipeline and includes necessary scripts to install and test eBPF for Windows. The most significant changes are the addition of a new job in the CI/CD workflow, the creation of a PowerShell script to install eBPF for Windows, and a PowerShell script to test the Process Monitor tool.

CI/CD Workflow:

• .github/workflows/cicd.yml: A new job process_monitor has been added to the workflow. This job is designed to run the Process Monitor test and it uses a reusable test workflow. The job requires eBPF for Windows to be installed, which is handled by the pre_test command.

Scripts:

• scripts/Install-eBbpfForWindows.ps1: This new PowerShell script installs eBPF for Windows. It takes a version parameter and downloads the corresponding eBPF installer from the GitHub releases page. The installer is then executed to install eBPF for Windows.
• tools/process_monitor/Test-ProcessMonitor.ps1: This new PowerShell script tests the functionality of the Process Monitor tool. It checks if eBPF for Windows and the ntosebpfext service are installed and running, starts the Process Monitor tool, launches a child process, and checks if the output file of the Process Monitor tool contains the expected string.

Testing

CI/CD

Documentation

No.

Installation

No.