(TargetObject:HKLM\\SYSTEM\\CurrentControlSet\\Control\\MiniNt EventType:CreateKey) OR NewName:HKLM\\SYSTEM\\CurrentControlSet\\Control\\MiniNt