Provider_Name:Microsoft\-Windows\-SoftwareRestrictionPolicies (EventID:865 OR EventID:866 OR EventID:867 OR EventID:868 OR EventID:882)