REG ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinDefend" /v "DependOnService" /t REG_MULTI_SZ /d "RpcSs-DISABLED" /f
REG ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinDefend" /v "DependOnService" /t REG_MULTI_SZ /d "RpcSs-DISABLED" /f`
`

gpedit
gpupdate /force
cd C:\Users\sgonk\Desktop\kape\KAPE\
ls
.\kape.exe --tsource C: --tdest C:\kape_out --tflush --target !BasicCollection,!SANS_Triage,$Boot,$J,$LogFile,$MFT,ScheduledTasks,PowerShellConsole,Amcache,SRUM --msource C:\kape_out --mdest C:\kape_parsed --mflush --module !EZParser
