(ScriptBlockText:Set\-Service\ * ScriptBlockText:DCLCWPDTSD*) (ScriptBlockText:\-SecurityDescriptorSddl\ * OR ScriptBlockText:\-sd\ *)