Tracereg
Traces activity through the registry APIs. Output from the trace is logged to the syelogd.exe deamon.
Uses
DetourAttach, DetourCreateProcessWithDllEx, DetourDetach, DetourEnumerateModules, DetourTransactionBegin, DetourTransactionCommit, DetourUpdateThread.