EventID:5013 (Value:\\Windows\ Defender\\DisableAntiSpyware OR Value:\\Windows\ Defender\\DisableAntiVirus OR Value:\\Windows\ Defender\\Scan\\DisableArchiveScanning OR Value:\\Windows\ Defender\\Scan\\DisableScanningNetworkFiles OR Value:\\Real\-Time\ Protection\\DisableRealtimeMonitoring OR Value:\\Real\-Time\ Protection\\DisableBehaviorMonitoring OR Value:\\Real\-Time\ Protection\\DisableIOAVProtection OR Value:\\Real\-Time\ Protection\\DisableScriptScanning)