(TargetObject:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\LegalNoticeCaption* OR TargetObject:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\LegalNoticeText*) (Details:encrypted* OR Details:Unlock\-Password* OR Details:paying*)