System Registry Monitor

This option group section monitors addition, deletion, and modification attempts to critical Windows registry locations that are listed as monitored areas within this option group. If you use a default security posture,
Symantec Critical System Protection
automatically sets up the registry monitor for you. If you use your own security posture, you must select the registry paths that you want to monitor so that the registry monitor functions correctly.
A wide range of options are available for each rule to enable very specific tuning of how the registry entries are monitored.