I've played around a little with monitoring processes with WMI. Check out KiXforms: ProcessMon for some ideas.