CommandLine:Remove\-MpPreference* (CommandLine:\-ControlledFolderAccessProtectedFolders\ * OR CommandLine:\-AttackSurfaceReductionRules_Ids\ * OR CommandLine:\-AttackSurfaceReductionRules_Actions\ * OR CommandLine:\-CheckForSignaturesBeforeRunningScan\ *)