From b9ed169c350bb08b467e71dfa4cfc25dd11ab49c Mon Sep 17 00:00:00 2001
From: novaksam <snovak@uwsp.edu>
Date: Fri, 22 Mar 2019 11:28:52 -0500
Subject: [PATCH] Uploading subscriptino buffer increases

These tweaks help increase the events per second I was able to collect so I wanted to share.
---
 wec-registry-tweaks/README.md                 |  48 ++++++++++++++++++
 wec-registry-tweaks/WEC-Authentication.reg    | Bin 0 -> 1046 bytes
 wec-registry-tweaks/WEC-Code-Integrity.reg    | Bin 0 -> 1046 bytes
 wec-registry-tweaks/WEC-Powershell.reg        | Bin 0 -> 1022 bytes
 wec-registry-tweaks/WEC-Process-Execution.reg | Bin 0 -> 1064 bytes
 wec-registry-tweaks/WEC-Services.reg          | Bin 0 -> 1010 bytes
 wec-registry-tweaks/WEC-WMI.reg               | Bin 0 -> 980 bytes
 .../WEC2-Application-Crashes.reg              | Bin 0 -> 1082 bytes
 wec-registry-tweaks/WEC2-Applocker.reg        | Bin 0 -> 1022 bytes
 .../WEC2-Group-Policy-Errors.reg              | Bin 0 -> 1082 bytes
 .../WEC2-Object-Manipulation.reg              | Bin 0 -> 1082 bytes
 wec-registry-tweaks/WEC2-Registry.reg         | Bin 0 -> 1016 bytes
 wec-registry-tweaks/WEC2-Task-Scheduler.reg   | Bin 0 -> 1052 bytes
 wec-registry-tweaks/WEC2-Windows-Defender.reg | Bin 0 -> 1064 bytes
 .../WEC3-Account-Management.reg               | Bin 0 -> 1076 bytes
 wec-registry-tweaks/WEC3-Drivers.reg          | Bin 0 -> 1010 bytes
 wec-registry-tweaks/WEC3-External-Devices.reg | Bin 0 -> 1064 bytes
 wec-registry-tweaks/WEC3-Firewall.reg         | Bin 0 -> 1016 bytes
 wec-registry-tweaks/WEC3-Print.reg            | Bin 0 -> 998 bytes
 wec-registry-tweaks/WEC3-Smart-Card.reg       | Bin 0 -> 1028 bytes
 .../WEC3-Windows-Diagnostics.reg              | Bin 0 -> 1082 bytes
 wec-registry-tweaks/WEC4-Bits-Client.reg      | Bin 0 -> 1034 bytes
 wec-registry-tweaks/WEC4-DNS.reg              | Bin 0 -> 986 bytes
 .../WEC4-Hotpatching-Errors.reg               | Bin 0 -> 1076 bytes
 wec-registry-tweaks/WEC4-Shares.reg           | Bin 0 -> 1004 bytes
 .../WEC4-System-Time-Change.reg               | Bin 0 -> 1076 bytes
 wec-registry-tweaks/WEC4-Windows-Updates.reg  | Bin 0 -> 1058 bytes
 wec-registry-tweaks/WEC4-Wireless.reg         | Bin 0 -> 1016 bytes
 wec-registry-tweaks/WEC5-Autoruns.reg         | Bin 0 -> 1016 bytes
 .../WEC5-Certificate-Authority.reg            | Bin 0 -> 1094 bytes
 wec-registry-tweaks/WEC5-Crypto-API.reg       | Bin 0 -> 1028 bytes
 .../WEC5-Log-Deletion-Security.reg            | Bin 0 -> 1094 bytes
 .../WEC5-Log-Deletion-System.reg              | Bin 0 -> 1082 bytes
 wec-registry-tweaks/WEC5-MSI-Packages.reg     | Bin 0 -> 1040 bytes
 wec-registry-tweaks/WEC5-Operating-System.reg | Bin 0 -> 1064 bytes
 wec-registry-tweaks/WEC6-ADFS.reg             | Bin 0 -> 992 bytes
 wec-registry-tweaks/WEC6-Device-Guard.reg     | Bin 0 -> 1040 bytes
 wec-registry-tweaks/WEC6-Duo-Security.reg     | Bin 0 -> 1040 bytes
 wec-registry-tweaks/WEC6-Exploit-Guard.reg    | Bin 0 -> 1046 bytes
 wec-registry-tweaks/WEC6-Microsoft-Office.reg | Bin 0 -> 1064 bytes
 .../WEC6-Software-Restriction-Policies.reg    | Bin 0 -> 1142 bytes
 wec-registry-tweaks/WEC6-Sysmon.reg           | Bin 0 -> 1004 bytes
 wec-registry-tweaks/WEC7-Active-Directory.reg | Bin 0 -> 1064 bytes
 wec-registry-tweaks/WEC7-Privilege-Use.reg    | Bin 0 -> 1046 bytes
 .../WEC7-Terminal-Services.reg                | Bin 0 -> 1070 bytes
 45 files changed, 48 insertions(+)
 create mode 100644 wec-registry-tweaks/README.md
 create mode 100755 wec-registry-tweaks/WEC-Authentication.reg
 create mode 100755 wec-registry-tweaks/WEC-Code-Integrity.reg
 create mode 100755 wec-registry-tweaks/WEC-Powershell.reg
 create mode 100755 wec-registry-tweaks/WEC-Process-Execution.reg
 create mode 100755 wec-registry-tweaks/WEC-Services.reg
 create mode 100755 wec-registry-tweaks/WEC-WMI.reg
 create mode 100755 wec-registry-tweaks/WEC2-Application-Crashes.reg
 create mode 100755 wec-registry-tweaks/WEC2-Applocker.reg
 create mode 100755 wec-registry-tweaks/WEC2-Group-Policy-Errors.reg
 create mode 100755 wec-registry-tweaks/WEC2-Object-Manipulation.reg
 create mode 100755 wec-registry-tweaks/WEC2-Registry.reg
 create mode 100755 wec-registry-tweaks/WEC2-Task-Scheduler.reg
 create mode 100755 wec-registry-tweaks/WEC2-Windows-Defender.reg
 create mode 100755 wec-registry-tweaks/WEC3-Account-Management.reg
 create mode 100755 wec-registry-tweaks/WEC3-Drivers.reg
 create mode 100755 wec-registry-tweaks/WEC3-External-Devices.reg
 create mode 100755 wec-registry-tweaks/WEC3-Firewall.reg
 create mode 100755 wec-registry-tweaks/WEC3-Print.reg
 create mode 100755 wec-registry-tweaks/WEC3-Smart-Card.reg
 create mode 100755 wec-registry-tweaks/WEC3-Windows-Diagnostics.reg
 create mode 100755 wec-registry-tweaks/WEC4-Bits-Client.reg
 create mode 100755 wec-registry-tweaks/WEC4-DNS.reg
 create mode 100755 wec-registry-tweaks/WEC4-Hotpatching-Errors.reg
 create mode 100755 wec-registry-tweaks/WEC4-Shares.reg
 create mode 100755 wec-registry-tweaks/WEC4-System-Time-Change.reg
 create mode 100755 wec-registry-tweaks/WEC4-Windows-Updates.reg
 create mode 100755 wec-registry-tweaks/WEC4-Wireless.reg
 create mode 100755 wec-registry-tweaks/WEC5-Autoruns.reg
 create mode 100755 wec-registry-tweaks/WEC5-Certificate-Authority.reg
 create mode 100755 wec-registry-tweaks/WEC5-Crypto-API.reg
 create mode 100755 wec-registry-tweaks/WEC5-Log-Deletion-Security.reg
 create mode 100755 wec-registry-tweaks/WEC5-Log-Deletion-System.reg
 create mode 100755 wec-registry-tweaks/WEC5-MSI-Packages.reg
 create mode 100755 wec-registry-tweaks/WEC5-Operating-System.reg
 create mode 100755 wec-registry-tweaks/WEC6-ADFS.reg
 create mode 100755 wec-registry-tweaks/WEC6-Device-Guard.reg
 create mode 100755 wec-registry-tweaks/WEC6-Duo-Security.reg
 create mode 100755 wec-registry-tweaks/WEC6-Exploit-Guard.reg
 create mode 100755 wec-registry-tweaks/WEC6-Microsoft-Office.reg
 create mode 100755 wec-registry-tweaks/WEC6-Software-Restriction-Policies.reg
 create mode 100755 wec-registry-tweaks/WEC6-Sysmon.reg
 create mode 100755 wec-registry-tweaks/WEC7-Active-Directory.reg
 create mode 100755 wec-registry-tweaks/WEC7-Privilege-Use.reg
 create mode 100755 wec-registry-tweaks/WEC7-Terminal-Services.reg

diff --git a/wec-registry-tweaks/README.md b/wec-registry-tweaks/README.md
new file mode 100644
index 0000000..1e7c776
--- /dev/null
+++ b/wec-registry-tweaks/README.md
@@ -0,0 +1,48 @@
+# WEC-Registry-Tweaks
+
+In high volume environments, it may be necessary to increase memory buffers for heavy intake Subscriptions. 
+Applying these registry files will increase the buffers available for the Windows event collector, but has the possibility of exhausting system resources.
+Once rebooted, you can look at the [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\WMI\Autologger\[Event-Channel]\{[Provider-Guid]}\Status] entry to determine if the resources were allocated successfully (0) or if the system doesn't have enough resources (1450)
+
+## Contents of Registry Files
+
+```
+[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\WMI\Autologger\[Event-Channel]]
+"Guid"="{[Unique-Guid]}"
+"BufferSize"=dword:00000100
+"FlushTimer"=dword:00000000
+"MaximumBuffers"=dword:00000400
+"MinimumBuffers"=dword:00000000
+"OwningChannel"="[Event-Channel]"
+"Start"=dword:00000001
+
+[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\WMI\Autologger\[Event-Channel]\{[Provider-Guid]}]
+"Enabled"=dword:00000001
+```
+
+### Descriptions
+
+* Guid - Unique Per Subscription
+REG_SZ
+A string that contains a GUID that uniquely identifies the session. This value is required.
+* BufferSize - Default to 256 (256KB)
+REG_DWORD
+The size of each buffer, in kilobytes. Should be less than one megabyte. ETW uses the size of physical memory to calculate this value.
+* FlushTimer - Default to 0
+REG_DWORD
+How often, in seconds, the trace buffers are forcibly flushed. The minimum flush time is 1 second. This forced flush is in addition to the automatic flush that occurs when a buffer is full and when the trace session stops. For the case of a real-time logger, a value of zero (the default value) means that the flush time will be set to 1 second. A real-time logger is when LogFileMode is set to EVENT_TRACE_REAL_TIME_MODE.The default value is 0. By default, buffers are flushed only when they are full. 
+* MaximumBuffers - Default to 1024 buffers (Defaults to 256MB Maximum per buffer)
+REG_DWORD
+The maximum number of buffers to allocate. Typically, this value is the minimum number of buffers plus twenty. ETW uses the buffer size and the size of physical memory to calculate this value. This value must be greater than or equal to the value for MinimumBuffers.
+* MinimumBuffers
+REG_DWORD
+The minimum number of buffers to allocate at startup. The minimum number of buffers that you can specify is two buffers per processor. For example, on a single processor computer, the minimum number of buffers is two.
+* Start
+REG_DWORD
+To have the AutoLogger session start the next time the computer is restarted, set this value to 1; otherwise, set this value to 0.
+
+
+
+## Helpful Resources
+* [Microsoft WMI Autologger documentation](https://docs.microsoft.com/en-us/windows/desktop/etw/configuring-and-starting-an-autologger-session)
+* [Windows Event Forwarding into HP/ArchSight at Scale](https://community.softwaregrp.com/dcvta86296/attachments/dcvta86296/arcsight-discussions/24729/1/Protect2015-WindowsEventForwarding.pdf)
diff --git a/wec-registry-tweaks/WEC-Authentication.reg b/wec-registry-tweaks/WEC-Authentication.reg
new file mode 100755
index 0000000000000000000000000000000000000000..511fde307695e490456b31ffbf9077cf870993f8
GIT binary patch
literal 1046
zcmdUt-Ae*N6vfYT(ElL&Zmi))20g6nT2h<PMiLofX}Vx5xJqC6uUEgBb-|#d9%C5h
z&iy#|&YAP^-c_tbL(TN0R0UmVq%po!3(fU{Cm<Sgn{hAbiujyp%st^=(Vkq^u6FFc
z(TPr}xmI6i>d2SJ*;mNv6Km_7XipItkuI@AZoZbF&cROT<Xddhf2Ju}BYY;ubj-ay
zb*XIQ_oy|~P1$3Xna@N6DvImqWQ`o_UIVhT>2K}Cj*dZyd8MNx_8V_%siX!7RkjOC
zU1dB0R+*@8ksD;x$Sji8BFlKIL<1dg*14@fGrTxtF7?1NvqkiJ#WLN7ux@xA>d>-i
zm~`osGwOgmr8d<Bu3|k}gr6(3`mATjOP_7clDf?a(k;Eq8@)rSlRqPD&d}j~1|i{J
zeBLm?N_fN6PT>6NmvRmx{%rtPi!IY<?EObA_Rw7kJ$b07t|mKERtbCG>dr+~RjWmp
loC;QhtQv}Jk<+yL^z84glq)-c?Sby#d$iW~_lo<<+b0jRqZR-F

literal 0
HcmV?d00001

diff --git a/wec-registry-tweaks/WEC-Code-Integrity.reg b/wec-registry-tweaks/WEC-Code-Integrity.reg
new file mode 100755
index 0000000000000000000000000000000000000000..81a5453e26c31074aaea281d81dc2a934e7bb31a
GIT binary patch
literal 1046
zcmdUtTT22_6ouDw(0`D5H^x$Pf*x#~O3H+cBr;@T%m!=(FO-FUz54bs!=R)d<1lmf
zZSBiC`|Y)@RGAVD^{BCOI#*A9Y-3F{(hN(4H$@ww=X8mGgf~Uc&`a8q&)L+5`>u7Y
z6EIim>QqgIs&aSL;12QCb%wX277;C7AUDuLP02bUcSfbq<+l1m4T$Ptvly$mw06`6
zS;t-lYuyd_`W)-eyb*}JLnYYq#2VVB8@YLAx^W$QIwC{Ll%DqaUbI8bB9ravfI9%|
z^RKFaRK!|R4XHw0=%ff+z^M^Y!yXcEzB$>97mqws-Epk97PX#{tXcx=#%rQI$D%Rm
zlV!=Mr$gqN!uLH~rFw7~enu|vi<%9^dUBX4xYZ8EYibu)YBxY<f6lPlLzDR|Lk8<1
zGsH+4GYnh@-mhM1$zhAvi{WarruzkZ|8W;P>|KF9s<J<}NdYgPSJ`dUw%a=&t&9}#
nLKSu}&zlAyibU4j?nR)Df%)fVN3b317QTBQ`~CgKedX;PbhM$$

literal 0
HcmV?d00001

diff --git a/wec-registry-tweaks/WEC-Powershell.reg b/wec-registry-tweaks/WEC-Powershell.reg
new file mode 100755
index 0000000000000000000000000000000000000000..ad9d56d350f6e384181c23d352fba4d6b1419439
GIT binary patch
literal 1022
zcmdUtTT22_6ouDw(0>r$4HYjL^f1nhB{dltNo2@`rUTOmj$#-5>(zJ8Xc&~xV;uI(
zzVCh3Ss(8`MM^Z(R7<7G=}IGw@uiw;rWZUu(Fkjbozo5R8PNzk!LI5+Mb5tVtla5T
zXVlzkpmTNP%Hcmyz~3d-)&<eNx@2^9jUHgRTF`Yy?}SON?QP~y6_Yi>XL8KMjkm8J
zm2LbEwPw2*8FS2jChAjB&?VmGdglrMm~(G8&Fh59h}-3LjJ&C?5~oZ@Up2l3HRK_6
zw2E3tW9=)W7s#lP=^+mJhg3GP9IfbP@W^8?^vE$gb(!^wW~L3<$>2HEkwwoSSY-AF
z$vo3yYEw<XDAJSd@Ox!epUn&u>e<#TsN3Ek-7&keH9Md>`E!Tu9Xj04bVzs)mpg=L
ziA6udde`f0u<P=wAsEefY@MO@pSahDXC)Zrz?Y0&Etpip=fNMtvm#c_@~lWs6|HGG
fXc*{mN|tZt=BqCz`=A@@0nUupeEykX-|_kcf4QDA

literal 0
HcmV?d00001

diff --git a/wec-registry-tweaks/WEC-Process-Execution.reg b/wec-registry-tweaks/WEC-Process-Execution.reg
new file mode 100755
index 0000000000000000000000000000000000000000..75e91048b6e0e884cb2f935654f64d8355450b0f
GIT binary patch
literal 1064
zcmdUu-Ae*N6vfYT(ElL&zM*C220d)+R#IkUB#|MTnk{TAxJqC6uUEgBZNZ=fA7dEi
z-aB*d$Jw)=A6>;tHPl4U%2d*&Mj8{#G}BbCL_%(3ya|3u*W6FJjqy|bU2Un%+SG>K
zw>r@&m>czVrnUn4oPD)81MZqS=eDN~FFLxyZs7%*lXXh&luCikZR$^y@M=WNyfGDv
zXir^`P2xUS(_O+IvrK>HHU#17!e$u|%~&qc7wmz><TKpaz8xJCi<#BY0sCD?s<8K1
z9%sX118u90Rpo4G2g_&e=@6?-q=r|suPdAtke(J~Gwe9Ln(KjOI_yyE4a-y;!o6X4
zsC~<&;j;|7;ME~x0yfhljKzAg8U9A*_`GII5fdBCoW0yZwxV`*sdfu=x^{-;9@@-j
zGNgQ+fEgmJlo=A+fwRW9Dwyo>#UmJ-t(YO_@c-(vhXyNX%SUk@+A=D1t*RQR&uFlW
qSHtqK>imf=-`4|CwF+#24nZ3p7AjO8!hEEAxF3CM{de{KWbX?arKSb|

literal 0
HcmV?d00001

diff --git a/wec-registry-tweaks/WEC-Services.reg b/wec-registry-tweaks/WEC-Services.reg
new file mode 100755
index 0000000000000000000000000000000000000000..59caa353270d8d5a4e978c35a74b5fe769c8efc7
GIT binary patch
literal 1010
zcmdUt-Acni5QWdR;5(GuN0QQ7D|ivpszqbLh()ZFXlo6`6q?pw`s(VpTPqc8!An^-
znVp$4Gkf-Yymyo;S6?GNsZdF08fb{G&_rXs;As*~IgL1%bU}PfH07Lgu4+pjYf~F`
zU+GB4U@q0uiP{Pk@b4+&9};WnlxSBm8L`f>BTk{FR2@@0r&DNaoBktZWDW3{9Mf^(
z?WzN^g+BmmrpwqvmYL5)n;=|^9_x{LZ;2GTwo^Jf1eJ0#M|<oya_g$8tbJ~@kL}9G
zSEjnF3bnS`E)k!&u{^#F_72elkTo()&Wvh?3y0jP?pS7?m|m|~rduDT4VQiGTILLU
z9(5NiI@HU+7P^O@R1dboYUCV0?-?o4v&BroEl*Ia>0Mds9f8jOTw!^JHup0Xa^523
z4hdGy9WpzCv+`vYyv4j`0zZ>A6VDm@FPiJ3FCT>jsHKi->b$UvT72xX)t6`0;}Y@6
ksamBOJsNE_SU$=M>?_T_72Jf?L^tp{_|oz3%KFLGC#zzclK=n!

literal 0
HcmV?d00001

diff --git a/wec-registry-tweaks/WEC-WMI.reg b/wec-registry-tweaks/WEC-WMI.reg
new file mode 100755
index 0000000000000000000000000000000000000000..7235a48d7ef0673dfb6fcda8184ec2988bd757e1
GIT binary patch
literal 980
zcmd6l-Ae*N6vfYT(EkwoUTo$^20iGymeeL>B#|K-nl0E0uF@C%>(%d$E?AV%TMWb8
zJNMj=IdeYVyGoR5pot!pX-nrCYQ$ZpnWlQ?CM25RP4KsLNqkB)!B6o^+L6!N)P~#F
zI@Sp}SL*9jZ3U`v_7!mk#9BHd+EWKaM;F);UZ6Qur_@gA6u8>ff1)v{A$Nwcj`?j*
zT{2tT*T}W$#_SQx=Cf!>#`Y3*<7V@81UBJ4o(|cs<oeoI6>O-2_Q03$n%c!Gs)1d^
zs$vyfwE{7pXb85-Sy7!Db-hu|81S&?x?|ZC9eTZBS+@cF8iNBJIKGTCtCVx+QF%;m
zrh8aP^x!J|p1H_h^o$hi$>q$+Tb&?V)4RCRJ0d&%bA{Cz+Pu#yr2Ig@8)B@KH;ml`
z-nakA+3N6fF|5qi%(>v{f9tD<mP`#brzX=)6Wx@#Gv%0;e7v&Lk}0l)RR>ie(gf20
a89FukXen1~2!pY1;c&Rr?9VFt%Frj=W0Yh7

literal 0
HcmV?d00001

diff --git a/wec-registry-tweaks/WEC2-Application-Crashes.reg b/wec-registry-tweaks/WEC2-Application-Crashes.reg
new file mode 100755
index 0000000000000000000000000000000000000000..0ac912d4ac9d7949d707c763b545422b3366c9d0
GIT binary patch
literal 1082
zcmdUtTT22_6ouDw(0`D5H%1#T1U=}WC1pZN5*ae3nJ|svDBb9<SKmI9U{HdOu^DFH
z*4q1=vpzrinkvyqGd(F)PUjkHLN3)pbG?vhP@NLZh;zE2KBqb*PKZm|laK9c$9-2i
z)(MzP4RxxHLe=;W)#e{kYw3*YKwUbz>fyJELM>sP!<{fGblf(7rkJiVIqR{BtL#91
zkS+2xu(n;yH^FQ_t2RIsm8brQ#cX`5h|X;DJk>dIs(TQruHE*Yj$oT|Vo!&BZwlb?
zRaaRR?W+l&57Oeis|E1ej3PB3FLd2?dh06SSFnPrdWX&K$Roeh9cFuWne~ci(?-02
z-SJ2V;8tcF+3k8vh{4*%J#Y_>;csNdkj-p!(r1TRf?MAp-7q^?o81PTY|XH~Lx=Mj
zL&6({oFT$XI793<@V0)j)qQq((};UpY&ePSQTX>79iYb$Jq4(%hAs<E-=^{+zUi@q
p7dkx#XwJMQeNCzjtW2)zI(+oFQhb9~h;+j{jK6jNyApri;TI#WsDJ<f

literal 0
HcmV?d00001

diff --git a/wec-registry-tweaks/WEC2-Applocker.reg b/wec-registry-tweaks/WEC2-Applocker.reg
new file mode 100755
index 0000000000000000000000000000000000000000..26ff1dfb5aba3cc43f81e8ab495df8e76ce84202
GIT binary patch
literal 1022
zcmdUt-Ae*N6vfYT(ElL&Zft&~K@YaAC1pZJ5*cD?wzRF`CVkPrUj6Rqf<XyA#xTtN
zm~-!)Gw1W8t4N84n&?TXayrpSV`8ZuHPs7|kZgoE!O!W8{FH2jpWv6ZA)mFbHMcKx
zphGa{>gz~t1*&uQ)#41uHFZq3rw%tdI>m0`1)5QHO6`PBfvau(CyKc>B4&52V;1eH
z3$jVP4%ViN*<+T?XW0-$L3#2IEX!W&&Sfv%q@MOcM!e3`4*N|-)j%|~sS5A%!Pf8!
z_<5D6R#O#gm&z4q`9zD<FKCO1oek}AzEjQk@VGnE4a;Wg(CZb;x(#95_#A56v1bhW
z^vRg?s1$=ubqhz4?p=l7k#qdKXG;S;JIoB+@&xIM-le79EzrrID=g2@=6zNn;XeZ2
zFu+Q9L+mE-R{l=LU58&Cz|rH1spqWyC++pnS%6;V$_e>%)2Jym(^(lSAXev2)maS`
fXQ~Vr%B#8?K03>k9K!BESMWPp==o=bedp^78d04R

literal 0
HcmV?d00001

diff --git a/wec-registry-tweaks/WEC2-Group-Policy-Errors.reg b/wec-registry-tweaks/WEC2-Group-Policy-Errors.reg
new file mode 100755
index 0000000000000000000000000000000000000000..de0a03b580ad9452b4b626a0463771bdd3207699
GIT binary patch
literal 1082
zcmdUt+e-pb5XQgfp#MR9H@shh9=3HYDKj#X$Pi1j1zSU1y5YZG{pOfqP=b#!oZUGy
z^UdviAMb62iqzLwPns&BGYvGvHq}fMy<iFOhTO*76S}}Z!5eaqxEHjeG_tKNcdm4(
zBQTfh>R3(r^7wbv;P2zB>jZB{Eh1VvM{jWR6_a&B?ubgh%Wd_?8WA<XW-(TAY3-;D
zvX0#YYu$}FL&W+sZvY~zlnz{;SdZwZE-ut9lck8Tnl{%|*RJ~{(J{02mDC>RO(mqL
zDifBJLsF_KPv!tEuQI2A<{>#%&`Q*-g7ENEv`<9Z`Q~J^9VM~Fx<jnb7PVf{tXiKJ
zuwMGwbsM#<rj>Eu1+vDBF}>ciw@?o*!{5jSet~SLr)P(W!L4>MT~j;1Qo8{<+Bm~%
z4^8H?3=wbSGeZw8Vuq3HAi432E%({t^?U4Xwq}yWCjUD}JMhtmVR^Xb!N82;x3N5n
sZhS1D`HqjqP19<`)$j&L5nI_sq&5F$e84O8bi+FgzIgvT6MydT6L^WJFaQ7m

literal 0
HcmV?d00001

diff --git a/wec-registry-tweaks/WEC2-Object-Manipulation.reg b/wec-registry-tweaks/WEC2-Object-Manipulation.reg
new file mode 100755
index 0000000000000000000000000000000000000000..b371289a2d909e61c8be865f2ec332a5e80f5b15
GIT binary patch
literal 1082
zcmdUuTT22_6ouDw(0`D5pYSr41wGg}mXrw@No0tn*~B=87rN13ufBauFes_VIBe#e
zea>3@w&wk<rC6zY8tFk3Wptvx2KXkLYOE(b5w|g?5$BA~xF2&Hb51!IwV^C)U2D!R
zbf7~p=j!N44TUQ6?WoQ-<gTV;Zrf_|qN!8%bxxsXu#VwQi4;0+i$7Art3Ez^V-XkL
zwpt)-_{(4|y967sEI+%AK;-3<!<FvvUh~Qa(}gA0J*b5J^s|ynm%XQb{4o`K+QnW}
z&^A_4pgp(qm4msWO}GNSA?A}qgjuwJRiz)1dsoF5f-CA3HtUfG&rCNg%d<(WXLc5?
z#{{g$J?*%TT355MEV}E#n}D6@mcGRrI)<N-bNoD}RsHBNGjPipOjg7WmSWdITi=Fc
z@Oy^k92(ST3@I}Tsln!uQbXc0@culpML(O&uuI>jD=L|H^1o}ejUGd7p|FBeT+S)Z
yRGvpCroE!mo9Qu7iMKwQi7?Y_gl0=DQ)CuBE)*Xzg)aX{!Yt;x|6Yk-d-wtJmZ;eP

literal 0
HcmV?d00001

diff --git a/wec-registry-tweaks/WEC2-Registry.reg b/wec-registry-tweaks/WEC2-Registry.reg
new file mode 100755
index 0000000000000000000000000000000000000000..fa2ce188ff32c3ec7f253ae239205ef1622e199b
GIT binary patch
literal 1016
zcmdUtTT8=05QWdP;D0E2uS9#X6?}-H)uORr#3EKorL_iP3ccVB|GN6k#y~|a_$W)V
zGdp|ca`wEx^^_>nNK-v%u9D6))`YXU7MkgalNQkgZ;D^i1@Rft1V6*CX-ht9QycEP
z(vgnATxy^bbrmXLA1GoEiFI^Jw6B;OvCgq0yiiNB&d8lnDRjB5{!}Tq#+=z5t5}@&
z)dSh#JOFFmrF;{X^=Hu*h#i%`O?2)0^mGU=VKz_ud@pLVTC6sxZHM&LWU@Lrs`yPJ
zWi?n$;${8^oLAT@MC|4+dtI+&Gd4WpOWm@pqnKLHSXONW*T&{ZdyYHf&nIWWqeq?;
z>|A#+l<3}N_#K(!^O}){dUTj2xYZ8kYid_lYDb{6KWA9&q04-hA>%bdW*A~+%#gYc
zyftrAFc<TpLl|1D={e`@|LCrd#zHh=nhDTZt})Z7>CH4&!wRti?1r;Uk!_-;%evE^
Z-SE*^q2d<I4s`>!<4-OBtgf$YeE^+%oJ9Zt

literal 0
HcmV?d00001

diff --git a/wec-registry-tweaks/WEC2-Task-Scheduler.reg b/wec-registry-tweaks/WEC2-Task-Scheduler.reg
new file mode 100755
index 0000000000000000000000000000000000000000..1319dafad1ffa63d6aed1800cae9a00c2cdb1013
GIT binary patch
literal 1052
zcmdUt+e-pb5XQgfp#MSk-SE0f(1UJkNtw__5*cD?y0op}g>Lk(SHC&3U{FzyF&xgE
znfc~+zW2ADVx<~srUxyQ)2YUqU|VRZxt_3ucw=5O-Z`D)pW}^rr@X7$Q32W3mOGa^
z)Df5q4Roxo0yVe?>Tn16+B(78S42dlGxQFxKr6D&$(>RuaJjAiObJnAY!+h`GizTx
zkZtS@u-09|nIP7mc|#B-<*6~G-#fHOH=5!ffk<53mFwBl0hSoMr#;S#imI!o3U`s)
z2V2v=lRQ?Ryj5&XZl5Z7JWa%At*VSxarlB>$!44Ju&s29Sa%V%p3$t@h`rlpN7{9J
zv|Sdcn(fq6i(XeuFlCZh_b$Wt$Tfalv%}<%4zmKc*}>w6+Levk9nk5YGi>(IWj@Q0
z@-qQ54AD|%NL&ZrFaIgqV#H4m+1B!h{@45apM31Yy}&WA43|Q9U<@`Mm(Y!SRWxH<
l!*R^C7I7`SA>zZkx{EOGW$X^w_)yo5^J|WO&AQK<`v7xgqE!F@

literal 0
HcmV?d00001

diff --git a/wec-registry-tweaks/WEC2-Windows-Defender.reg b/wec-registry-tweaks/WEC2-Windows-Defender.reg
new file mode 100755
index 0000000000000000000000000000000000000000..529aaff178ec9e3963122bcf183d775241fa9b10
GIT binary patch
literal 1064
zcmdUt?MuQ?6vm&=LH~p7`$El`1$~%HOKJ%jNo2@kW&@kBDZSCZUj6R1!GaR}7?-=9
z*XNw`-1GS{RH9U|=6X`DiY_$K6kD!^GQD8w;7!ox=oMYz&+sPbDY~Z}RXN+*viC+O
zIwj{?W1Xq5KtBJmLjD21p3d=(G$3N2OXLtO&=S-P?37A@#WwZlnh`a@W@1dm!aCBB
z%pP{1T+`i*JLQ=EjJHEZT`p32LRUvb+}ldAjlH#fJ30m@VOB?n+&As3$y`lvcERyL
z>T;SEv!S+~$K~5r4Xdj?B0a9J7B-`qQ`b9ah8+j%lFFub##D)3kxaE1?hU)K4lI|3
z&nl<|uMTx*<mP&Su|$s+;qS~<{;FoENY6HBNnW{wd`;~}sdh+qx-mkzhd%Qegp}6_
zm?1(+nPFx-a5i|Wg2@3d9>LgR%?v9J|L<Oo*uj83YOsGkn^d!#XLh=d>|*zj0wf=~
kWu-20UA$)Vn%G)4qRI{yTi${BNOy2Q`QG*4x9=x=Ur(c@9{>OV

literal 0
HcmV?d00001

diff --git a/wec-registry-tweaks/WEC3-Account-Management.reg b/wec-registry-tweaks/WEC3-Account-Management.reg
new file mode 100755
index 0000000000000000000000000000000000000000..40e7ef39ec493becda360951f44c27c729f93804
GIT binary patch
literal 1076
zcmdUtUrPc}5XH}P(07o1H`LTJ=t0-Dq)ccdi457&Y++l$Rr*I?z52~n!5{=5W4OC>
z@64H*d+z!E>M2&Lp(c7!rkpM{(wMVMGfnlzNkBAaH({UCHSsCYn0?B=qCFL`UG2Da
zt5cnUxzRx9>dIH0|3Dr7KC!kgi1rnd5$X!R!_L>7s#9vGbn;zo>pxLK)`&C9v5u?L
zzIq_roY%qHbO~#W*?blaK<q0|`~jPgW#~Mp2rqJ(&&!T?Zgx*6WX0Uq(=qD<d;q?|
zx2Uq3pvzcGHRm;SpekOCyb4))me0;GO*m<B?qdagQq36h$e8O9vnfM*z2jN8A^aP|
zLmfFjjne{MSKNA3OTcD&g0)yS`E&zvfnW5r8^1ct9NhW@*@g<`wcZ`j>DCq2XXtW2
ztB}IG&mHUyQtptr3A`=eYsF^Bi$?G;+i;HskN;breY99aS5+)f$*Ie<c<7X8p6Sd~
oS;vY_sV%4461p)ZmU;IIUJWg-)E@8xk?whe(Ngn&tME62KP5D$asU7T

literal 0
HcmV?d00001

diff --git a/wec-registry-tweaks/WEC3-Drivers.reg b/wec-registry-tweaks/WEC3-Drivers.reg
new file mode 100755
index 0000000000000000000000000000000000000000..6e3c13b144b9b3769c5e612670e2c0ced686b36d
GIT binary patch
literal 1010
zcmdUtUrPc}5XH}P(07o1H#ApsgC1;MOKKC^NFqZvG+WqKaJ9em)vMpVx?qq&k1^cc
znLGE)%suyfe)N?n(@0Z2DOXA78f(H{uDND<VJ9G)5KW0ox+Fg%n-FKjb?vBvZEMS}
zYaQzZ%$0^ZRZqTJ{D%tp`{cShBRf#UiAWdtA(5{IRcF-B=;YhlrvFqar^f7=Gp1v)
zJ5V2Fm;Dx4GhND>U}ip(4M5aXR+~7{<7)03JEfx|Pzg74bijI3M|<+9)zB{10q5Ha
zE}p9@xh9^+sT%n*Uk|HOJ+MfRGi}y8)eIMo4(V`*nRz05z2cc}BbYW^j<j!?GwfAB
z7A!h+Pr>H8ho3|bw!&uQ62I&jD%P{bEWoW#kpI%#UF#i!&i-6seTE+QGZix4!siY#
zUdA0#JAt$DWeVORUNeTD`7aYM8T&7q8=$W$I%!}5>S@EbQB@Na)vf2ll!w>CjE>4^
hAiy(9tgu|(vX1AWuR_5Atj4;9*YQfnKP&4yS6>zbn&1Ec

literal 0
HcmV?d00001

diff --git a/wec-registry-tweaks/WEC3-External-Devices.reg b/wec-registry-tweaks/WEC3-External-Devices.reg
new file mode 100755
index 0000000000000000000000000000000000000000..650aef02496c91902647bef62f13d37389999f92
GIT binary patch
literal 1064
zcmdUtTT22_6ouDw(0`D5H%1$8K@a0NmXrxiB#|MOW&<{YI%S1_z532E!=MBo<1lmf
zZSBiC`{TW>Sc&=?>seD}bgqGh*ru9kq8BV7-WY9+p3x=#3EmhzK`&@eE@xLe_Pf@x
zPQYBLt5dZU$mi~=$sOQp=nQX15fPCtkeg_MQnF6Solq&TxlR4CMnny;nHW=XW$ma9
zvVq+PYq}fp4LPPi;|)RVE6Y8{Z>))WL}gV&dt!n+?x}8U-;R#R6Emx$L%ugvRZ)@o
zN~+7_WYNl0Gm?j`q&$*|@@$<tdT66_pnNzfQpwkXY=#|&*i`o%(@R9HS0q!d5BG-M
zz78yxhEG>H`(GmK^qtb{1B}Ibv>E<JF7ZoblbPohlY(3CV7j5Uw^q9eI@vnIdJiq;
zGZ_+ICt!viQo;-)+kvyiTdkOkc+nn=%{I)i<naIQWrrQiu~9`%$Zpkm6SH|`wyj{L
r05&T~J|~Ai%T|U+d2ZKkZIwuun8o*&hcMsME!+>jcK!G5`^nxXw7R6|

literal 0
HcmV?d00001

diff --git a/wec-registry-tweaks/WEC3-Firewall.reg b/wec-registry-tweaks/WEC3-Firewall.reg
new file mode 100755
index 0000000000000000000000000000000000000000..b86387040343d08284a2c00347347c1ade2e5d22
GIT binary patch
literal 1016
zcmdUtTT8=05QWdP;D0E2ucTKS!G|_&v}i0Cv51utX{~{nLN9oue_j1{W2J%?e3W6?
zot-%|vuDryTVIJXjWpGx<|^o1V@<f5YoVE*x#<v1@TT|$T@s%WP4F}Pn)c*kyV|kq
zTE{v8bETn9)swF#`%odfPpqpmq60-_M7rP{;`v%qbw=%sPQI;e`cIXTHRjIbn2zh)
zf%+i3+&96R=~C7NGxM2f2Si0h1<YzHKPo0C)s3Cg(Gj?Ww>dgwy^>#6TO}}cRvTo6
z+GVN~Rpqpg71<kjHBM#XH5>Qjf$@k1>?^7nHXOC+aEF<RB6_`WGTlbZV%Qw%z;b8!
zbLqV1(V<QXcCLFEO7vhW{Ep1=dC!nnK3U8X+~x%HExoH7y+hF1pDS$6(BplkLdI|S
zydmb4@rKk+;B5JuHFFU^8pF_H%gi}v|3`NNG*&`obu8DKYn9coIx-sbG0$qONv2U?
jKxPSz1^iDyMhnHc<gC6_+=1Cxw{ScD)bh{j`p(t|+HRZK

literal 0
HcmV?d00001

diff --git a/wec-registry-tweaks/WEC3-Print.reg b/wec-registry-tweaks/WEC3-Print.reg
new file mode 100755
index 0000000000000000000000000000000000000000..2ca42de257b28595b554433818e8533741646def
GIT binary patch
literal 998
zcmdUt?MuQ?6vm&=LH~p7yWwnF3;LjQm6RDRlE{#SW`i}sDZSCZUj6RXfq@BqjLY55
z%YDwvbI#XiPl+-OHPN$jm2|0*#@KSrG}SAX5O0DuK`-eV{}gY6o}t&YqY7tRTlU`S
zM5kbGG|-v43e?~~P=|kjudQ>ueMP*8bcNhO3p6L{l-L=W0vp@ppD5+k2%C9hG8Wdp
zdLY}_8(>X!DR;~<^%-vnVpnBdpqn0Ny0aBJItG!@m7_!MyM5`)S4(v|*#pz$yKm7R
zR(ENu%F_|vDsOApn-<|w!5+C>eGtv?;NY3-fn#ck$n}O~vJGL`@Ho_gWz8^G0a-BU
z5I+T*>k)1eJ=qAqBNzBZ&W>WeSj-&UY6ba*+}=v=4(RO95msyH(w~WtF^7O2Vx){7
zQd@zub}9vD5fh5xX11Z)1zZ1N*ZS<0%VyO%Asf?z=Q8_awyI{O0ET>|2FJx;X7(Xc
fm4AinF~b^?&t4Uq8^UI+d-xnJ_jmn9{p9Hz>A;wT

literal 0
HcmV?d00001

diff --git a/wec-registry-tweaks/WEC3-Smart-Card.reg b/wec-registry-tweaks/WEC3-Smart-Card.reg
new file mode 100755
index 0000000000000000000000000000000000000000..f5959a3fe73d4a46c5673cdabac9c6af12e67800
GIT binary patch
literal 1028
zcmdUuTT22_6ouDw(0`D5H^v-IgC2AoOKK7_lE@Ha%m!=(FLcAdUVZzR;X@aCjKgvE
zZSC7xzP)ypDpR6~9yC)<XBujRZKk=VdcqRnP0=RkIbGnN;!V*r^pbYubGEhR?v;*o
z4CYdOov5u)HNJhtd_#OKo#O4OLqtdC$T3=|1zD%$&Zrc++*W_0F;PQo7Go9H)}Fc`
zTi9!0t-CRI#IgR&8-XY)5B^>QY;)w$Nr|pqubvLUrp)K*fct{Kp{jNjIBWo-$f>A~
z6fmogKaXxxRgg-YhMFq#TSwmG)>P1vY_<^(>q562>#9SoXC$kZuy5OFqJ6hN+o2C~
zy-Sa*W3V&bv89w5EW`K66@FDSX39s0S%BN@VD>|XV54>nI{R~m%^up!XBjeHBxHsG
zQpOBp*MaxT`>eOu;nh}e_w(e1f5yKaTr0rPGADv>4R&t~tH8FBlR~yuMXEVI8S9!v
j7Km*U+a%Wb<`c90WOKxZ2fAU$!w*h>&9W8K*8kXd{EMAl

literal 0
HcmV?d00001

diff --git a/wec-registry-tweaks/WEC3-Windows-Diagnostics.reg b/wec-registry-tweaks/WEC3-Windows-Diagnostics.reg
new file mode 100755
index 0000000000000000000000000000000000000000..f46a6f01f3bc4abdebd68758abef98ff08942060
GIT binary patch
literal 1082
zcmdUtSxW*@7>3{Lp#LCqZ@8mD7dA7N)Fd>KM21XhHee&T&_;i~dcI?VK?z>Q;hgjB
z>-+i9RjNz_P4uLhayr*gBV;qpHPs7}5N!%KfzRm@{S<8qpTSqPrvhhJJMLcVSSR>g
zsjpLY<g3ZwSH$n5YwHYcPcas;E}$bgUkjp6iJg(jcd;%1L}RRm$jrtvuB1J6@oXb+
z;%n87xg(C%XW9^tvhq;t9p)9lC)j1!TbHTs_-|bGo{or?(y^xl?i-zz=rL4-Th<}*
z>@BMWRpAdDWxX|2M;5B68Xgs_O4Mc+#=jHIX5=AX=$>PB#^id1vTOr3U^5<Q-%Zq}
zS|HkLx*nOv_|Eje+)_Qd2!DGn{g*i-I(~LO3;fnAm~F^iS<4;aooyXqy@n3`S%i$)
z`}B}NW%Mw16?j{3Y&FlA9VX0ezM+%lB>y``d*HDM!fKolbOr3kP*?|LRY&;_hk0<<
l#4<qEa)>PP7r2JXDpUhJt`Hxxg+#aPVfc;v-;wxphF>}LsSf}E

literal 0
HcmV?d00001

diff --git a/wec-registry-tweaks/WEC4-Bits-Client.reg b/wec-registry-tweaks/WEC4-Bits-Client.reg
new file mode 100755
index 0000000000000000000000000000000000000000..49dfcf936bf4d3dc722e4528b246d1e05311f3c2
GIT binary patch
literal 1034
zcmdUtUrPc}5XH}P(07o1H%vFvpoewcO3H+cBr?R%Y{6D=mHy#ZuYPlN!Jv#D<1)K5
zckY>)d+zyo?<iKHfhKxVs+=w~)QG)QGfnlvPDC~)nh@u7MSe;)CQgX=w4(xRTU*X<
zbfQx**Xrp^ErkmB_tfMcl56OkY*%egv~`K!BnmaB>Xh0EokCaJ`cE|G)Q~+pV;!^I
zt~wwa><3_Nx-m9l*?g9bK={h5=B7{aLe9ji9=C2<PsgBRZs_R{dsCge)TvofnN<RH
z#6Q6DRP(78;#FPs3SPwNDppYuE=puA-qnI?#)$`Fu6vfv)uz`go^>0*xN$nrfn(5E
zEP%||^yoYWo9Y3cVm-PFKO>j;WzVMidUlvOxb+Fr4ZZ!f-c8WSpDV1-(BghpA>mCz
z?$F0exWm{@;QjhS8GmhFw+~OV4U;dK`)?ZTqPH3^Zu%;^w=X(v`Pyg4^j5^otD>)c
jr@R`T>8*^F`1+_MU@ep>I)dfC?%;X2()IUB`^woT>ZG2=

literal 0
HcmV?d00001

diff --git a/wec-registry-tweaks/WEC4-DNS.reg b/wec-registry-tweaks/WEC4-DNS.reg
new file mode 100755
index 0000000000000000000000000000000000000000..86b03d0156aeaa9608e8e8dd5991497a110f25e9
GIT binary patch
literal 986
zcmd6lTT22_6ouDw(0`D5H*^|rK@U1kC1pYrNo2@`W&_g*Ug(B@z54c;VN^nIu{ksQ
zzV}&Yy}fo7E7d?_J!q<&&NS2r-&8YA^n@oM8e@&IbGjftAsS<+*d^_#fNX0kJ6Af=
zF*TR!>qH&-s`Kxw&EF^1(kaoNLNY>~qqnhq&FMO!cgiF`>uvMLO2``GvmBea^7hoF
zvW34+t!<ZZMu_ca(SQn1c{Q0B>N?xb(IMF}H*&Pkc~O;|h7PzvlYc<IkIz>T%|nX#
z^F%7-l+Xgz@Vb0UM9Rbiq@e}f3<C#!u3N<R2$}VaX43{BY#0u-mmy}T6{ugK=P)6m
zcB(sYiFKcK_`Pyjzns}tq{pmgPTl$j(+#t|wb^Z|(?54u-=V|(tV7Bh_}n2vOSwam
zZQy)+kriGcuNQ&KY{RBYr2ad{dhn^ii<aS}o4u_IV~j5qJjN%NV_FT4RY1v@RmCzU
dHMPsvg9UYD@yXZ#6eHb$<M4yGKQrkoM(<fUl_3BC

literal 0
HcmV?d00001

diff --git a/wec-registry-tweaks/WEC4-Hotpatching-Errors.reg b/wec-registry-tweaks/WEC4-Hotpatching-Errors.reg
new file mode 100755
index 0000000000000000000000000000000000000000..db5bf0abb6b932e955e8077c23d097140c037176
GIT binary patch
literal 1076
zcmdUt?MuQ?6vm&=LH~p7yJ2&w3;HnUEGY|`B#|MOW&@kyl-}@PuYUKMVNik}<8rri
z&pFR|eLmjXN|dUvv7VGEr*jQ7M3-r*iC)k|SQB1j-Z@=hpI}XRr@Z&HqXK7JTlQY*
zNXK9<)zyj46e{4~Rg-^+t)Ww_9mROWY9Tjyg_;p{LhO`Gp^a_wk2S(;fX?`sj7x1t
zZIBK00a#Prh&$w%`iwOK;VDnfG4@CG_}=Q?_B%u$*^H*EOxLz{M~B2p=-1H!_f2&o
z6zOhPRk<MY#Eg(@NS=J804cz)Xstdvm+PacU@fR*r8&{egdB7;-EmBnF}YrmOtwDr
zH?{P&Z|7-dYVs~;>kwxIHlu?UxCa~IZ{z~M$l0X#XN#GETdg2lliOR#-2|O(9AUMF
zGx{?TQZ^LQLk}sXhmozo*>GRWX~yid$JC~4`dG~IfAg~g7pt(L1lL^43m4w`aIkC{
u=%Mwj<ioo%6VBsb!J`JI20KgG>v#m3f3rPe13lfagTWW)e`n#(34Q_<v8Ukx

literal 0
HcmV?d00001

diff --git a/wec-registry-tweaks/WEC4-Shares.reg b/wec-registry-tweaks/WEC4-Shares.reg
new file mode 100755
index 0000000000000000000000000000000000000000..34247e0c7828b940b665c04ff0c326a19b053a11
GIT binary patch
literal 1004
zcmdUtZ%YC}5XPU^LEk}qf1%f98ua44&XT%>E|SO)!%GkB1ka;?^wq21t_lVw^fH#&
zot>FyW_I@Z`s^xIrlF>KR<4q+lxT!4*IYBbVhQo4+@{=1y1_rgn{v;%A81b%)~<G}
z-04i`U~bjdg*po4bM_T+2Kd^##M@I$M67G{h+Ck7tTS?FR0?cvQ-7)nQ3*B^V=At!
zJ#|60vHM_6cN1j9GW{8E2*Q&CeyoAbo$KEASk@_+ly{YNjJ(r-llZ1iSQXynAhjjl
z!{e)tt)WA?><*_-L>1lmJoE}@s1LH4NtDS|=#gc*iK+F5W~vRDvzg>jM_^W~YPAKj
z#Y+k%JZ3tno@|ESk&6rqWW+mPET#ar-a)>lwzpP00-gOi!+H-L-e)po{6t_UpP?tb
zX))`~|FW7|%ukxXns4dXRIC0IzV+Z%lWuFU!?k_8mPejtkOOmE#J9FOwg9aO*BbD!
ehU~L@Y7ybXtrdGiCOXgqGfkEp-ps0>lllhG=9zr}

literal 0
HcmV?d00001

diff --git a/wec-registry-tweaks/WEC4-System-Time-Change.reg b/wec-registry-tweaks/WEC4-System-Time-Change.reg
new file mode 100755
index 0000000000000000000000000000000000000000..d6d664f570dcdb3dc315308410fda83c2576193d
GIT binary patch
literal 1076
zcmdUt-Alqy7{;ILp#MR3Z<yNDpo=-Rq)bRjB0~(94d#TYltuq~^?PRngAlxo!{NN&
zAJ2KdJ_iaFYofVcv`|hr3N*#G&{B!kSekf4v^jcCxA+shA$p8{q9YYJhdM~_y)JY~
z&YecOQdhn_-jO=IKEAfD@eb7^qNhG`2hG=tstL7YI{9gB>pxdSRDjK5tYc;!YCvWi
zyGO1~7jdT?o6o#WGRn%6zfQLaG(+n%`HYx6-e--eXc-Ub?2gW<6|%3RGwwUJUDZ@&
zOP6?;tTOU3Hj}DYibx)(ML&~DU{NKuq6WUA>cp4yK{Z3jL0{>KV^j9%^@e2KCg5)f
zPjs5%X_yx1lws@8AtHCd)Y%Tnj?7K|re}veU(>x;?7lt0Vn>DYR__kk@!l1-XXvt@
zRWQ6W<YRV^(g~bB|0_eY$Ip*JZMkEQ4UYetpF_A<hYc<aE2g|K-qqk>1&eX9$Ti8>
nS^?oa@l~`2ISm--;%^b*!NrX2O@3pnNB$uA;r!n${Egr@#v!IY

literal 0
HcmV?d00001

diff --git a/wec-registry-tweaks/WEC4-Windows-Updates.reg b/wec-registry-tweaks/WEC4-Windows-Updates.reg
new file mode 100755
index 0000000000000000000000000000000000000000..9591f5a699d36a18c75ede333764f7bcd189f82b
GIT binary patch
literal 1058
zcmdUtTT22_6ouDw(0`D5pHTBQK@U1=Nlil2g~$*?vw>+0N9l%tz534af<Z|=#$o2{
zv-es1vd;Q=zf`0|eU0>_R2iLWpdr3g6OHwPr$IF0G~%4m1@SS_h;zcZs2ycl+uE|<
zwGMRz=1N^1t1Vwu_O1eUpIA#LL^}$(5$X&(;N)vc)-kygD)~0IsXtQ8tpPrB$5dQ;
zJGunf!e0ezx{LXSEYqKfHb4~QVy#c;>RgXZ)B`hMjvL#xqXV);_#N%@y{Q7WrV`6o
zIr8MlSf-lGxwx=u>`kV3<>9OF_iSActcf%=Bb(vI!86qz%k&pg>lMpX>%+X^wy!<Q
zq+v5lwI!<#Sz@rM?%^xagU#?Wa*m(Z44CuTVy58MJ4iRwF09oKKqr6Bu--$P`Amj{
zxAB>whm|lxY&&p%{ZdOFLtd^2Uy}_J%o+Tzn(Uyz8VV?(w!GCs-YTrH(qA488YOyY
nt_-U#_l^4MVCvfCUqCfg)@-Hl2CVmV3-5!4&c9dQSMELmAseI@

literal 0
HcmV?d00001

diff --git a/wec-registry-tweaks/WEC4-Wireless.reg b/wec-registry-tweaks/WEC4-Wireless.reg
new file mode 100755
index 0000000000000000000000000000000000000000..d1a4bbdb4a87caa20bef7e78ece278a396ae13e0
GIT binary patch
literal 1016
zcmdUtTT22_6ouDw(0`D5H@shh9>!5i%7iA8$Ph!b0UJRby3t>+zI{f)poAV{b7uD0
z`>cIkpC5fiiZ#|;Pg*LY3r#e|w$w@sy<lnKjkwLZXLN;sfj8nFb1&;aIb>gZ?%e1^
zr(mu%)R}q;<nte@%Rj)^(K+6MLSBTrMDKD7ln`}6?3he}i*5Pmn(=Ca&E8nXjdh?t
z$PRWNtW`JTOcATkye$wVWzixRd4^|++`2kF9fOPL&C?O*O>Md;tEN1tBLA$@ElL(k
z-HF+Xyl7)9BG!3M6?`?mK6*p%M6+pl=!xzTt0*MbE1G2+Gi#gXScmHf7A5cW6xpVm
zgjye%P^3o};df+OMT+cdq-Tdoz-?Es+>yJqmAeZ%{&R%w8hZ3+5n{Fx(8CBVriYoU
zz}vB#&E!HhI$}br9W|#j`#-!Jz_A8fHl7sRz6-FZ4!5dUjAI3kX~w3i<6Q%-t|pi!
dY^&gJ^TLN?8y2^i>_~UacCzO3&+Pg>tuLeso6i6M

literal 0
HcmV?d00001

diff --git a/wec-registry-tweaks/WEC5-Autoruns.reg b/wec-registry-tweaks/WEC5-Autoruns.reg
new file mode 100755
index 0000000000000000000000000000000000000000..7e9eb3cfe79b3e995c77d6b2f8dadfc20d818139
GIT binary patch
literal 1016
zcmdUtUrPc}5XH}P(07o1H*C|ipoewUlG=nelE@H4vjtmWSLq*p_3Ag*41*GSjLYTD
z+?g{o_uTXT)>WcZLrwLdTm_wJq%n87X3F%$O_OMXH^ndLf_O$W!B6ok+ER(NsSUTU
zbfjZ2m+I?89fb-w`-(V2Vr`ug?I|WB);V^B7ivz`jM^!kLRZ`RPc<QH#GU0>$K`EL
zU65_=1F$yTggs{2d=_njsHpfA&&W%e{Myaw=@38RZJrL;FY>j^I~t$@&H!W?ds|g!
z1)L468Z}$0ySi1*J#MNXE#4x(s#mHR8y?ZQZdo=_Os{7w>o$aIV{@o|$DQ$4qSKN`
zk4h7;x$a;n(Y>qiJ92?v^o%snqr=R>txk}y>0Msw9f3~&Tw!&F4)3!HDZdf&h5=T}
z8zyc7Z_VE<nTz?+0SwL7%)H?2|LCrV#!M>>bhU$u0#s8(rRKMs#wz?*h*ft=^qs~`
gku{c2j*o2`4bj+A#Z8zU=mu^_pIZJ|UEkUI0BXLRq5uE@

literal 0
HcmV?d00001

diff --git a/wec-registry-tweaks/WEC5-Certificate-Authority.reg b/wec-registry-tweaks/WEC5-Certificate-Authority.reg
new file mode 100755
index 0000000000000000000000000000000000000000..f7f8007d3a2aa1bd20952e9b681514de82a2b5f6
GIT binary patch
literal 1094
zcmds#T}uK{5Qg9Dp#LCyZ{)V71YPK=C1pZJ5*f1P*MhB}E@k0gubw$(c~L=K#^LPF
znVEM!-`AJ6VkPQnq6f{C(Yg8>qMK>1sTOFeSYuuj-WgqDpJI)9C%p68(Jp6OTkc-#
zSSMhv)YYk)3RU9YRfB(st*$ey9kuXi=>oaID^yC<DX|kWg)X+`pJ<F%AD#JF#<jMi
zHpn{q5?HHl%pG#9KC@Oq<dx-XnmH8@xOa+>`{-A=5vZx_Z=oC4fu|!P#&qrJko$~h
zpn{86qSFBEKL4_l0u`~;(3SD4Dd!{~t?2_*@GQu8XGt`hlZS6gH3L^!i(F4gmaWGY
zte&0@z^zZtNh@THK2zpDVs^3aU4-wEs|YJ(gU%lvCIz=y!R&|J!A9-|=;YTCHfw0o
zpG8R6Q%DaHQbG@7SAqAZt*vL;Vy}_g^w0Ci{R^&k;AIhJRp8hjJTJk?ER3_au`xhb
rX2!-#W2=v3?5#Lv`uO<BW(l?YV1AWtM7m`k{dfL<%}Cqn=N#VvGR~`M

literal 0
HcmV?d00001

diff --git a/wec-registry-tweaks/WEC5-Crypto-API.reg b/wec-registry-tweaks/WEC5-Crypto-API.reg
new file mode 100755
index 0000000000000000000000000000000000000000..f3f085288ec0a1b4219a208837f6c87d7006f496
GIT binary patch
literal 1028
zcmdUt-Ae*d5XH}P(ElL&zG3C61U=ZUmXsN7B#|K-nk{T=_(5OvuUEghCK!~_V_fdX
z+?g{o_uTXT)={cleU0>>i3&Q^Ktt{(nrf^kZt8ebtPyrW=lI8XQ|uf&(1wbPb*;I1
zsRJE?xlm6>YAaNYy{8s?h_9(*yj{ga#5&{L!U{Db>zLd*l|q->>W`EWHQ>%-tm5Lf
zs}9H}_cgHAUB(<TtUvSCK?L$y?H%_n#wYp&)RpVi(>~ag_j%f7zJQ6er%h%BYzVr{
zTH@Ac-R7MYPE{f-#>XnDK}3y+fY^XhC+d}K#)wDMOg9YcDyG&mC#%+nZ)3Et9mk(>
zSS0I$OOL!6*okgoDb=0J@H29bpVw?D(WAr6z%6$$Sy8*RRJ#Q_|8s`r9@@OmGUWV7
z$Qu$)Id8~Z2i`CLvtTdg*AiHouIPKt+yByE7p+xMPvle;pr0~oGWD6BOltxEX8PO1
lQ`8ox8hZq)iq&97&J&`wg_`Ryoah>k2cMe$US(ey`v7LOoc#a*

literal 0
HcmV?d00001

diff --git a/wec-registry-tweaks/WEC5-Log-Deletion-Security.reg b/wec-registry-tweaks/WEC5-Log-Deletion-Security.reg
new file mode 100755
index 0000000000000000000000000000000000000000..1ef34dfc84e1685552e6b4be29e3ca91fe1ff70a
GIT binary patch
literal 1094
zcmds$-Ae*N6vfYT(ElL&zG1rB7WAO2mXrw@No0tn*}}GhACyJ^diA@r2nHq8V+_O2
zy?4&JA9MEOy{lNMhMMR}Gv#!yk;eFDnro^ho;uMOYl5BACGjcI7(2x-X-9e1wzk~9
z*0D~&T&b^9wH2wtx33o8h*(o+M0@IRqoWJXEv!fjSf_BOWQrWO<)0|w)(D^7v5YHk
zPhF5r{1vcPUBVu-tUim@L6qc^-Tc04L=wl9)$TjyJD1t|Tk6Jj;OPioOxK<c*{=#z
zhAB`(A*>C!%Bo^VoC4M^+t)skii(`}xZNOMfgR%6bDo0UV6!=SpclGlS*;y%y>PN@
zLteq=Jk)`ks!cWz|7yY>yb0Ku9++LMN5}9pGQ(#%TN>!uVHV)lE0}G_9jxVUflhzT
zuwFx({){2zMIw3_a7yVRaTR!fdbQO|JG|k5+08d}lTGtKXtjqfLv&R`dqwnCL6bh}
vG}{y!;Hx@?R*B@%qR*YYQ)GzMaO$*3gf3Uguk#uM-MarI)BpF1{5r=^KUk`1

literal 0
HcmV?d00001

diff --git a/wec-registry-tweaks/WEC5-Log-Deletion-System.reg b/wec-registry-tweaks/WEC5-Log-Deletion-System.reg
new file mode 100755
index 0000000000000000000000000000000000000000..a5172073bf9b5fa0991d60642477b2492137ff83
GIT binary patch
literal 1082
zcmdUuTT22_6ouDw(0`D5pHLgkf*y3Vk}@G9i42+0Y+xF}3uVz?ufBbT0fQ2JjKgvE
z*_X9%%dgMAVx<~ssu#^w(3QrTpqp!<nO108SYuvO-UZ!YpJ9!8r@SlLQ<1Z)9e3|^
zrgLI$HPnT=3RUMjREKYft*uL}1NHFe=^DAiE7TIy8Q3YALWgbnr%Lb|qcb1Nm}>{>
z6WK;zC)TP<xD$@mXVw-G75QX0y{{&g#9?K%`yj7epJP4i-c|4E6ttL*Jsor3L9cMF
z!?F%^2u@W2x)M@Ah8D-iqlE6nNrCeZ)WClqZACTY572Bz9`aI;9ILZOt~VshHev%d
z<B^VBKFe7IH=nKtenRYAPs}Z*W<&TpGK<f0b`<H=#Vm<iuVB6bAy~`ZAv)a}VZDYf
z{TV{aHbQ!ckWzX`Tm|0N8_Va}WBU=4SZwGdo8*7z=m0*}U{w?58MEqe(T9KbHtrcO
q8_d?{x61Cyj*ms`HBK3yGO}4h_?R=k#TFtxxc^4R``?-PbB5o<yr<d#

literal 0
HcmV?d00001

diff --git a/wec-registry-tweaks/WEC5-MSI-Packages.reg b/wec-registry-tweaks/WEC5-MSI-Packages.reg
new file mode 100755
index 0000000000000000000000000000000000000000..bd06c446d2ec87a00c592936754e0e8557b1784e
GIT binary patch
literal 1040
zcmdUtTT22_6ouDw(0`D5pD=HYK@U1=Ntw|^5gB4>He@3>N;mrJ)whoc1|{_vhcmO!
zS^K)qdVf1ptVDf{^`KN49c!Q=cd4eD=!u&;Xv}HMIipkX324kY;at>)vaEHjxqYEM
z?GtmZt`5{zs0#nCTKq$>rVc?nitvbZg5Ba2YDU%xxf3ddF1OVmYlPQ;JM*!Mi`$OQ
zh-`9SA=bJZv4<?{&(Jy%MfrF|`1v|gPuIHRYd)ziUB8}oiI17l(+>MZB^9*AM0w&%
zSiTzC#160uWG#dER1H9DST<pxs#`_wa_ln5E7^<{4`ikrmUR|U>lw?c_2JxD?Q7d{
zXgp@AwcyjE@`%_}w=fm!-eveXavndg*<#K|7c(Pnxr1~??ZQ&+7SYL{Gc5PeW<JZ1
zz<9_EJ*<QoMy><z7jLv+Fye)KFg0D#`<%P~r^61K3(#2&b>&fP1^xKw%+3v`xgzfu
oVpT!1=*!fX1rJy`d~(=^glKM|>N-sKbOqOgPi=p%wy&&x07@O72><{9

literal 0
HcmV?d00001

diff --git a/wec-registry-tweaks/WEC5-Operating-System.reg b/wec-registry-tweaks/WEC5-Operating-System.reg
new file mode 100755
index 0000000000000000000000000000000000000000..134c53333d51487fac51004f027bddd8a2b9f803
GIT binary patch
literal 1064
zcmdUtTT22_6ouDw(0`D5H@ubwJ=ipslnG5Fks%YB4NPM=N;mrJ)whog7?j{+91dsS
z*1nzf`O#CXR6|Ylq)Y{!Yosx@OfyaOf+fHkqfO8Yy2L-l8>6S_b#1A{+0=%+*E-e-
zm@5r*s;+!Bc?at7`uN&9!`oL#M5qho4w|nyS*PSqspPxdR)3;|s1Y`cv5L91uO7%Y
z_9j^CF5!+j)}MI;5Oo#l;nCS5qHNYNwvfqe!jT?y<NEe=M4p&gJ?(SfR8@`K4c-Hl
znXrgdM&3rMsij?KYhtUoIyPxpJ9sM2YY~QfC!1}@13T9p$2ttD^@?QGhV0(9JJcTW
z`7!KbuO9glu$k`JSWM5B;cw(3!=h$Kk)9o94sN-FY(<9JQtb}tbnOhwJ#?ARGT82Y
zW{8kdW=LEI-Wq?EZ!+ZXB6cuaF@tqb{>QxR!@&l8I)rUi7}j*m3!L6^9IW%7K9X^=
l1nY{#l<+q=#=#1*d3-pSvpit)k#5=j=$q@mv+w8jz5oz$r91!t

literal 0
HcmV?d00001

diff --git a/wec-registry-tweaks/WEC6-ADFS.reg b/wec-registry-tweaks/WEC6-ADFS.reg
new file mode 100755
index 0000000000000000000000000000000000000000..2418bb9307e420726645778b2b8d3a5fc0c44c88
GIT binary patch
literal 992
zcmd6mSxdt}6ot>T;D0E2SGw6n@F7VXEgB0(EMlcZT5BMt(6qSWUsu1G8mLeUzR56T
z?sD$EbLQmpW1vKt#+vC#xk|dwL{ogZ7Mkk?PnT$dHN!6Hiujypf}LR>XkTU4u6FFc
z(TPsMTx+B=_2tXuJ5tEkC)U$B(V-$TB3*J0v3xD5I;VC<C*RgK{bx$an&2}zreon9
zY5=l_-vw)?OW9MFna@PKAR5{u-cdl6TRWelWAYR3<mia~M$}{ewyI=xETW<&o*LLX
zwoAlRX;QJysX<l?yGFi;$7Quu(L2=)3l83;?pbD%h+eOpOt&!{8y3epw452<${-8=
z94e+@b3MRJqDNcdcjOAc>KQ85v&AgItxu3|>0Mvz9fHpOTw#5NKKC;fGG4*w4l$>U
zJEV33XTzHmj77X)3^R)@v#z-M|2i9@sj5{)3!Mb$#3;$LT4`HNxp<9|JpP`tRaZcM
gKz0jH)gl_`qKl>q)plVr)*W0<zO}nqO+Q)s0wwm9u>b%7

literal 0
HcmV?d00001

diff --git a/wec-registry-tweaks/WEC6-Device-Guard.reg b/wec-registry-tweaks/WEC6-Device-Guard.reg
new file mode 100755
index 0000000000000000000000000000000000000000..4a63fe6ac27d2ea10779fd15fa9f4bb4e931a2fc
GIT binary patch
literal 1040
zcmdUtT}uK{5Qg9Dp#LCyZ`k^g23_d3meeM+kwk`Anl0E0ZuUuky?W-DU{F$*aX7p4
z_0G(BXWrjBN|b7#i5`?Gr(+E@!j|byQ$1k`@g`^!^qfxdPw^(`DSBBODsa}d=I*)n
zbpYl}Jsqm8Kz05-Mf?MNEgj+QDkdV<337xMXhzm4xl<|yF1OX6XiU@)o5fhgg|({=
z$QJfGSnF=g9dWEb^M)WQ%4-+PJ^fzs&ufq9J`n?5xPConNzgs*a9^}3AEaTc+!~l7
z?<<in&vy%J6RD0=A<Aq%z6Mb>*l6IX65r4(*^Ctrd8TWQbr#dfGm=#sz`3zH(6-~y
zcq~wV!KX*1G1yEuFqP=mW%wC6$Ioj<yz<duX5f}P$X3)YE!B=dr+?0{+(Vo9S%#FU
z1iYb-l=6nL>%jZPj1~;WOxUJ&x1#qscmHn>yX>6L*4W<IZWTFsCe~oHZ2L-hntaVx
lW<EYr)7dP(jBbbudlRyAi>(e}y01&P9)9lj_uKZBwGTwPpOyds

literal 0
HcmV?d00001

diff --git a/wec-registry-tweaks/WEC6-Duo-Security.reg b/wec-registry-tweaks/WEC6-Duo-Security.reg
new file mode 100755
index 0000000000000000000000000000000000000000..844332a986879b73c5ba85220b60a3485413e0fb
GIT binary patch
literal 1040
zcmdUu-Ae*d5XH}P(ElL&zG1oA7WAO&R#GNpB#|Lonl0E0e$W^F>(y_rEf|#4V_cRy
zGw05kx#!Nlzjc%<Q(t2}XsUuvHPDdQR5MNVL?i}H@y7TCor6z6Q~V6StPK@e>soW)
zr4DsO&V_n9R!fnp>^(KvBd~@}K)Y&lqOCLRCSIgDtP{91Dn*Xl>W?+z)PR_sv5I-L
zs}7kB;#G33yAj`zW&If%lTnecI{28~cy3%ByUmlXT)&<Uh^5@o(;nZ80+qB4>yB#L
z#P+dbRvpW*0Mu8=UIF((LMp{%RJ0EkI6u@YY^I6_&s?`G>#R+!XDqAMM{`rPuU)61
z=~#p_*VBV<MDA2~D3$8oG5nml$Y0cKD$%3MnUlBN!E{CKV5xSK?Cj4B%RRKXpD|>-
zO2i!!tc*L1TnFAS-Y8eF&5I={HCxg9Lc9Mrhh1iFi|MH{Hz6-xax+)s%>pLRX0A#!
oz^d`L6*=qUTg=Xv@h!t<F=poSsg6-P(KT8RK4<&;Y5S_$2e4hBU;qFB

literal 0
HcmV?d00001

diff --git a/wec-registry-tweaks/WEC6-Exploit-Guard.reg b/wec-registry-tweaks/WEC6-Exploit-Guard.reg
new file mode 100755
index 0000000000000000000000000000000000000000..4cf7d7cc2439b03c455cdf2d8222883ac841f1ac
GIT binary patch
literal 1046
zcmdUtTT22_6ouDw(0`D5H!R0XK@a0JQ&J{0kwk_Vnhn?(UdW36diCvNf<Z|=#%AX1
z``%}r_5RjUs!TnN^r(q)I#XW*d=pJI))StHXo@w$&gp{qm}rWfVVAU}0<x(M_g(2o
z$JAV^qZ2h1D&Xv>!5I>(>y&6)2^opb(HmHyW^^6XJ7ZGldfWVwhGg~eS&mIydfRGI
zS;rqxYugR^28iuv(TIw&@|<%$xTxJCuS4>?<n(myHujt+#rCw%_o5vY`3iK7IRk2Z
zItA#aRnV(wyJW;jUfcW+h+8DaUv$|Oz0%Ea@l<2xEn>SRVE2q>(|Vw8xc0Q?P&6b9
z^jjk8(QioYM0a47>fUwuxpGmznAzZ#b5}E?Zgqpnn%Vx!>;~1@pF6DX(ByvBA>&;_
z?$AZcxWmwG;Qi{AmKY|yp1s?2&GrlQ{v#LLj&}hpsv<EQD#EN9;=?H8ow3n(z7lU_
iT#TL1@=MrOQHDDayjwCm0`0DDz`Os+@9!D+6}JzJtD#c>

literal 0
HcmV?d00001

diff --git a/wec-registry-tweaks/WEC6-Microsoft-Office.reg b/wec-registry-tweaks/WEC6-Microsoft-Office.reg
new file mode 100755
index 0000000000000000000000000000000000000000..8cf1396988a8a9d4d0d81da8a92dc7e4e7f62985
GIT binary patch
literal 1064
zcmdUt-Ae*d5XH}P(ElL&ZkVq20X^upmXrw@No0uSY75&6uF@C%>(y_r3I-+k7?;bv
zcV^C+nRDmsv!ht41{&*GnR2>Rq!G4EQ%&@WCBz%^8uQNS8vg`u%sb^>){Y9SZEd-I
zt5cnUxlvE&YAH~av!^C!fUltoyj``4XzPl5lUJY_tP{9XG6jy?@{g4e6=Aa&%eb_5
z)dAVSUIlB_CF~K)>N9T$qM|%eu^t>(M#PZVJar9OW{-5|>h^R3PfV|#j@a+2tE6M?
z(P2qNxbiSo=+roU?mnJ8*((dL&n*CDJH%eofp+nIz-H=rSY|G-RoEui8`&+}0PRiP
zfexLPre^`{QdbYg1Z<{96pQubdi)zX$Io*%)z^!|%)qTykgdt>ujDrU(v2BbYiQA*
zF{J!XKo5OxDLo{v0&j!AS}NJ*7yBqSUDLx{!~Z*%U1qSz996Z?vS}<aZ#9<BWZ4W>
qvHH$d=D&*E>dt2IW!{FUFh?OXxSaA3<@>rv`)D!izfa#!^}YcT$E5rK

literal 0
HcmV?d00001

diff --git a/wec-registry-tweaks/WEC6-Software-Restriction-Policies.reg b/wec-registry-tweaks/WEC6-Software-Restriction-Policies.reg
new file mode 100755
index 0000000000000000000000000000000000000000..05471d042c64d5d4cbb0dfe944372e50589354dc
GIT binary patch
literal 1142
zcmds$YfHjV7{~vwgT908{X&;B3woi`mDDm?6p<m8mj*V$DR!Z+Uj5Elf<XyEui|jF
z=k|Z@=l$(ciBk17(L$LDI@3TSWSM4~>Iq2`Z2~ueFX#gO6m0^Z!u#4%k+Z1{d#`n<
zBQRI$>R4?Bs`2kC;vb-E=>%;@F&44Tp(D6JbG%ORof0XqzD@jz##jxI85<LEDedSI
zWD9u>tjTW79dS&4M%x5YkqdsJAr=euYy{WVnAex+4ozN*t5fU6$P&C{y0H~GIv_$q
z7aZ+#UsS@grz#OD)bA4`P(yXTuF6Oo3Zbgn;WnTeP@YAVKvb{@u`THpZ>Db!*f}{4
zZSFC#o}o;%K3SW-_qAucY&u;8x$L-ur!m+}_w+K+gZ1z;GRNmJBl_`ZF>`RM8Dwi>
zmses(pwnM_Sk0kLea1t|+yZLoL8a6%wi!5oGR0+&V<v4jV78{Zyu1H#mpkmO$6Kkf
zlU256o8vO|Ivcxd_qK+#Y-K((_Mk$nLu>ED8$^ZOYqGb?m(gTeJ>4>|!RPz<eq+D(
F^#k_*wBi5&

literal 0
HcmV?d00001

diff --git a/wec-registry-tweaks/WEC6-Sysmon.reg b/wec-registry-tweaks/WEC6-Sysmon.reg
new file mode 100755
index 0000000000000000000000000000000000000000..c7e667281464e7c708e2177b3c46633fef7fdf1f
GIT binary patch
literal 1004
zcmdUt?MuQ?6vm&=LH~pJy>N3b4f-(WR#HpINFqZPnhk7%FO)_9diA?k1%nj&7>B!^
zd(L^z+kL)1JIa)+ud!Y<RY6x8Xozj9nI>9biSTCJ#@q|K!9T&9anHF|bf^-tuRVM2
zbf$AKx9aIaErkmB_muDt@ildcx2rZ0ZC#@$+(OOCIw5yXrO@U!^~V|!HNa+KOvSae
zs}9H}_5iHuZp0ZPra$A2K=?WUzo6e|i@vu#7Ig|HW3Hl3IPa>efw;^Os4fRoNinn4
z&^+u79ii2*Ix3_2=mAou#u1S*D4*{K*~})2+~;~kOgC+6y`h<EefDfN+1D}I*5X)g
ziHw<KPRCDdC!=qZVLNh}VTnwX>eXWA;5Iv$?#SS6)J{O>f6lPkLyP%LhMboOnIT2X
znPFr*C~kR|_14<FWXim=9sQbW&OhN>7jC(hDOETY!xzJzI^wOk6=3zOt-@R`T1<RQ
fbQS)&7U45*1h>}gjo4_a2X;DGark#u{oK?yk^!0e

literal 0
HcmV?d00001

diff --git a/wec-registry-tweaks/WEC7-Active-Directory.reg b/wec-registry-tweaks/WEC7-Active-Directory.reg
new file mode 100755
index 0000000000000000000000000000000000000000..759a14ce729d3de142e02ccecda7c70be110840b
GIT binary patch
literal 1064
zcmdUtTT22_6ouDw(0`D5pYW~)J?J==lnEJ0WXP0e12%#>l|_HO`u5m>K?y#_VRQE7
z?Ato)^P{Iwk%pS;S#xD{u93$0=2~c`B_5w>h&9E|=#u!1XowwQm$auWXIDFkT<cgT
z<XmZ>Q+4F2#ywD*+auP}8PUGFyy)rzy^ZB5rs|B^5uLoGw)LNC!mANJdt)6_Z(lt!
zTlj0_+H@0S%(3|_>XT8COZ<*_s3#(>8fezXe74b2H_6<Nj;Ir|tD{5YO*xfSRDmiD
zYE;S1W7~0&I-VNZKF8j;AW_Ft#$P}@`d7il*E`h=9fx?VdyY-mrPnK(bsK`c%`((M
zf~Db^rGJX6qbA$Mp#A`2p&pY8e`l`pS3TPb^pfPn<gHII-_X0b*1Ju1v~`8`89MA|
z6(WAeV}}4OVuwjGfwRS5rAT)9y#T}(8+KS>_<woXhl5#IW&Fy)<Wj;n<CckWu!;C+
oHU6~;J6-NN?;D&7ksP-%H4g_<mir(d=oaip-(3HleLvCr0^(k!7XSbN

literal 0
HcmV?d00001

diff --git a/wec-registry-tweaks/WEC7-Privilege-Use.reg b/wec-registry-tweaks/WEC7-Privilege-Use.reg
new file mode 100755
index 0000000000000000000000000000000000000000..a2e18bba151438ffb8b99b1bd5944866b0455d4b
GIT binary patch
literal 1046
zcmdUu-Ae*N6vfYT(ElL&zM;0J20hriTT+|RRuUOvXtuDe;A)@ruUEer6AVh~F@|C9
z$J}%8oH_gc)={EN1C8~dTm_wIs1dPTQ%&?lBp{pMjqwXQCqE&Z;Ai+1ZK%jv*P7jz
z+SdU!7wYLyZTV{O?J45xlWXaSY*#TSVx3|~c)n(!PQcFS<Xddhf2@>KLt^HP>9~k?
z)uFOQyg{v*E@h8cW<HY*sHn=-F@B<Zc1q6VU7c}*p|0%2j`l!ExTT{V_6vw5HC2<R
zP1Qkh`IfY$5X&Q8<GwDLsy*f6m8@MM7Jk+SoO%V#@ZxBf4mT__TTHKKEYocO>xS2X
zwk?Z>NrSdv)B!K0HrFj&CAzZ+KUdD{=RG6!^=NBm)GbetujuV9^^T~{{*16ZL!0{<
zgbdz&?$F1|xI=0uaDMel3l3vmxer&<71Phz`;S`eqPrr0Q{8H<iq){XtKrwI?n1N|
pU^RHlP-U!LRvisCQD0zn=MgERyM?j?*zW7vDu1r;?-lozw+~}Yp;7<<

literal 0
HcmV?d00001

diff --git a/wec-registry-tweaks/WEC7-Terminal-Services.reg b/wec-registry-tweaks/WEC7-Terminal-Services.reg
new file mode 100755
index 0000000000000000000000000000000000000000..a62a39fb332226bfc9d9b1268c2e12352cc84dae
GIT binary patch
literal 1070
zcmdUt-Ae*d5XH}P(ElL&zTszT(1WgPNtuw5M22i>wqPr`+9&<%)o-o|1{L@im)(13
z=FXX!bI-?nPq7jWHPxe1Wpt{M#`sdrHPbVmkZ6oG#m?xQ_>5?bonV)=qbzG%TkgBm
zp^nJ8&_KuPC{T@kpf-Cztfdp8eRa9f)fwkDR-gr_Gq4jX1rFQlPc`Az2%p`tiYsql
zJu+MPYvfvY6TUIa`m<<AMp-^J%yaMNjJV}H#F-xO+z?B3<vRCt08-4fp7!}(L2jt7
zDmVq@v3%w%D~Ii?NF?h{b#CpdiLXJ;kbjA2NKTWz#{Ug8<HsXsp<9-9)TP!7C#yDu
zedBkiJ;$aonx)c;Sr3#6xvB1$CuSN$_&sx(zpU9-q$iiNAaA{c^bdsMTJ1L3$;Jrl
zJ#?7Q5E9-eV1|fO!VDAFfw$3Xt+?#+>Jco=|CnOQ;(yj=A01{<R24ntP+!UEu%HTd
u#p%#g7ILcbwoP>EvzuxgtTK@tyQwvg4p&MKVL#F}{Exo${<8wV^Y;nIG^Wk~

literal 0
HcmV?d00001