Process monitor registry changes