CommandLine:HKLM\\SYSTEM\\CurrentControlSet\\Control\\Lsa* CommandLine:scecli\\0* CommandLine:reg\ add*