it seems, he is showing all actuall running processes. i would only like to check for cmd.exe for example and if its not runing he should change to critical or stay ok.
like windows update service.