CommandLine:Set\-MpPreference* (CommandLine:\-LowThreatDefaultAction* OR CommandLine:\-ModerateThreatDefaultAction* OR CommandLine:\-HighThreatDefaultAction* OR CommandLine:\-SevereThreatDefaultAction* OR CommandLine:\-ltdefac\ * OR CommandLine:\-mtdefac\ * OR CommandLine:\-htdefac\ * OR CommandLine:\-stdefac\ *) (CommandLine:Allow* OR CommandLine:6* OR CommandLine:NoAction* OR CommandLine:9*)