(TargetObject:\\SOFTWARE\\Microsoft\\Windows\ Defender\\* OR TargetObject:\\SOFTWARE\\Policies\\Microsoft\\Windows\ Defender\ Security\ Center\\* OR TargetObject:\\SOFTWARE\\Policies\\Microsoft\\Windows\ Defender\\*) (((TargetObject:\\DisableAntiSpyware OR TargetObject:\\DisableAntiVirus OR TargetObject:\\DisableBehaviorMonitoring OR TargetObject:\\DisableBlockAtFirstSeen OR TargetObject:\\DisableEnhancedNotifications OR TargetObject:\\DisableIntrusionPreventionSystem OR TargetObject:\\DisableIOAVProtection OR TargetObject:\\DisableOnAccessProtection OR TargetObject:\\DisableRealtimeMonitoring OR TargetObject:\\DisableScanOnRealtimeEnable OR TargetObject:\\DisableScriptScanning) Details:DWORD\ \(0x00000001\)) OR ((TargetObject:\\DisallowExploitProtectionOverride OR TargetObject:\\Features\\TamperProtection OR TargetObject:\\MpEngine\\MpEnablePus OR TargetObject:\\PUAProtection OR TargetObject:\\Signature\ Update\\ForceUpdateFromMU OR TargetObject:\\SpyNet\\SpynetReporting OR TargetObject:\\SpyNet\\SubmitSamplesConsent OR TargetObject:\\Windows\ Defender\ Exploit\ Guard\\Controlled\ Folder\ Access\\EnableControlledFolderAccess) Details:DWORD\ \(0x00000000\))) (-(Image:C\:\\Program\ Files\\Symantec\\Symantec\ Endpoint\ Protection\\* Image:\\sepWscSvc64.exe))