Tracking outgoing transactions & malleability attack
I personally would look for newly spent outputs as opposed to TXIDs.  The outputs get spent the exact same way in a malleability attack.

So create a hash based off of the inputs into the transaction, and when a TX comes in calculate that internal hash and check off of that.