(TargetObject:\\Microsoft\\Windows\ NT\\CurrentVersion\\* TargetObject:\\Image\ File\ Execution\ Options\\* TargetObject:\\GlobalFlag*) OR ((TargetObject:\\Microsoft\\Windows\ NT\\CurrentVersion\\* TargetObject:\\SilentProcessExit\\*) (TargetObject:\\ReportingMode* OR TargetObject:\\MonitorProcess*))