(ScriptBlockText:\[System.Net.WebRequest\]\:\:create* OR ScriptBlockText:curl\ * OR ScriptBlockText:Invoke\-RestMethod* OR ScriptBlockText:Invoke\-WebRequest* OR ScriptBlockText:\ irm\ * OR ScriptBlockText:iwr\ * OR ScriptBlockText:Resume\-BitsTransfer* OR ScriptBlockText:Start\-BitsTransfer* OR ScriptBlockText:wget\ * OR ScriptBlockText:WinHttp.WinHttpRequest*) (-Path:C\:\\Packages\\Plugins\\Microsoft.GuestConfiguration.ConfigurationforWindows\\*)