I'm sure that I don't use all of the program's capabilities (too little time to spend on it), but I had occasion today to use it to log sandboxed processes as they start.
The Firefox extension called Flashgot is used as a go-between for Firefox and numerous download managers.
The flashgot.exe program runs when Firefox starts and writes a test file to the temporary directory. Then it ends.
About half of the time the flashgot.exe program isn't logged by SBObserver (1.17), on my computer.
I think I've seen the same thing happen with the java program jqsnotify.exe.

Do you think that the 'scan interval' of 3 seconds is the reason for missing a process that starts and ends pretty quickly?

Due to design problems this project is stopped for an indefinite time.