You can trigger set actions on service monitor, but not seeing them on process monitors.  Is there a way to trigger an action (cmd) based on the number of processes?

We are fighting an issue with php-cgi.exe on our IIS box.  We are trying to narrow down the faulty code or other issues, but it spawns only about once per day and we have yet to isolate.  In the meanwhile, IIS becomes unresponsive when the number of php-cgi's start going wild and restarting IIS  or recycling the specific sites application pool is the only thing to get it back.

Setting up a process monitor for php-cgi.exe based on the count of these processes triggers the alarm, but is there anyway to get it to trigger a remote command on the IIS box.  Say restart the IIS service or cycle an application pool?

I'm not super familiar with Workflows, but in going through it, I don't see how I can achieve this.

If not, anyone aware of a 3rd party tool?  I know I can probably write a script in conjunction with SysTools or WMI calls and have it scheduled to run every few minutes, but I'm lax on time at the moment.

Thanks,