((TargetObject:ControlSet* TargetObject:\\Services\\*) TargetObject:\\ImagePath (Details:\:\\ProgramData\\* OR Details:\\AppData\\Local\\* OR Details:\\AppData\\Roaming\\*)) (-((TargetObject:\\Services\\WinDefend\\* OR TargetObject:\\Services\\MpKs*) Details:C\:\\ProgramData\\Microsoft\\Windows\ Defender\\*)) (-((TargetObject:\\Services\\ZoomCptService* Details:C\:\\Program\ Files\\Common\ Files\\Zoom\\Support\\CptService.exe*) OR (TargetObject:\\Services\\MBAMInstallerService* (Details:C\:\\Users\\* Details:AppData\\Local\\Temp\\MBAMInstallerService.exe*))))