Tool to monitor Windows Activity in a VM?

I am working on something for the AME team, and in order to really dig out whats going on, I wanna see what is happening in between a couple different ISO’s and see what changes. What I am used to is being able to open files in a hex editor and find differences, and then map shit out side by side, but IDK how to do that with this.

Someone told me there was a tool for monitoring registry edits live but they didn’t know the name, and I know about resource mon, but if anyone else knows a modern tool that’ll spot reg edits live, I’d really appreciate it.