The post mentions using the system monitor to track some events (including registry queries). There's apparently other ways for that (but which the author failed to compile, including the official Microsoft tool), and the monitor can only see 32 XOR 64 bits events, not both.
