Remotely Search Windows PCs for Registry, File, and Process Changes

This project is to use a .NET (WMI or similar) program to remotely search a host for specific indicators of malware activity and create a report. An example would be looking for a file in a specific directory based on file name, size, and MD5/SHA256 hash. Other examples could include registry searches, DNS cache, running processes, existence of mutex, and added services. See the attached file for the complete list. What other ideas would you have about other indicators to search for? Ease of use and an excellent GUI are critical. This project will involve substantial back and forth communication - you will need to be responsive and creative with your ideas.