You should be able to use a Windows Adapter to accomplish this. Set HookChildProcesses to True. Create a command file to start Internet Explorer using the runas command. With HookChildProcess enabled, when Interent Explorer starts it should be injected into. You will of course need to do this process when you are interrogating as well.