General–Step by Step Configuring and Using ProcMon to capture Registry activity only

 

image