8.x+
Application Metering uses a kernel level driver. This allows Metering to capture all applications that run even during startup and user logon. Essentially the Metering agent, like antivirus software, begins with Windows and allows it to track EXEs executing during startup.