ScriptBlockText:Remove\-MpPreference* (ScriptBlockText:\-ControlledFolderAccessProtectedFolders\ * OR ScriptBlockText:\-AttackSurfaceReductionRules_Ids\ * OR ScriptBlockText:\-AttackSurfaceReductionRules_Actions\ * OR ScriptBlockText:\-CheckForSignaturesBeforeRunningScan\ *)