(ScriptBlockText:\ \-ExclusionPath\ * OR ScriptBlockText:\ \-ExclusionExtension\ * OR ScriptBlockText:\ \-ExclusionProcess\ * OR ScriptBlockText:\ \-ExclusionIpAddress\ *) (ScriptBlockText:Add\-MpPreference\ * OR ScriptBlockText:Set\-MpPreference\ *)