HKLM\SYSTEM\CurrentControlSet\Services\Sense [Start]
HKLM\SOFTWARE\Microsoft\Sense [OrgId]
HKLM\SOFTWARE\Microsoft\Sense [CyberEndpoint]
HKLM\SYSTEM\CurrentControlSet\Control\Windows Advanced Threat Protection [EnableMsSecFltOnBoot]
HKLM\SYSTEM\CurrentControlSet\Control\Windows Advanced Threat Protection [MsSecFltBootEtwKeyword]
HKLM\SYSTEM\CurrentControlSet\Control\Windows Advanced Threat Protection [TcpipBootEtwKeyword]
HKLM\SYSTEM\CurrentControlSet\Control\Windows Advanced Threat Protection [MsSecFltBootWatchdogTimeout]