title: How to monitor registry accessing? [C#]
body: <p>I have a C# Service running as LocalSystem (lets call it Serv.exe), and I need this service to monitor all registry accessing.</p>
  
  <p>Specifically whenever a call to HKEY_CURRENT_USER\Software*.* is made by any of the processes it launches I need to catch that call (either a change or simply accessing) so that I can redirect it accordingly - I know of the CHANGE events but what about just accessing the registry to get a value?</p>
  
  <p>The reasoning (incase someone has a better suggestions - which I would more then welcome) - the Service is running under LocalSystem which has its own HKEY_CURRENT_USER but this service is used to install software in the background of a logged-on user - so when this software is installed  it may try to affect the HKEY_CURRENT_USER of the USER itself (which is fine) - so I need to ensure that these changes are reflected to the USER and not the LocalSystem account.</p>
  
  <p>Any advice, help, suggestions would be greatly appreciated.
  Thanks,</p>