Win2012R2 configure the client to check "everything"

Hallo,
service detection is working fine.
The problem is that we have no idea what the customer is doing on the system.
So the idea is to catch every process for later analyse.
Ralf