HKLM\SYSTEM\CurrentControlSet\Control\WMI\Security [*] HKLM\SYSTEM\CurrentControlSet\Control\WMI\AutoLogger\* [*]