Martin Leung wrote:
I think those listed in Autoruns:http://www.microsoft.com/technet/sysinternals/utilities/autoruns.mspx are quite complete.
Looks good, but of course a HID should also include security significant events which come from keys other than those which indicate an application startup.
