anchor.diff:  cd C:\Program Files\Windows Defender\
   MpCmdRun.exe -Scan 2
   cd C:\
  -GOTO MENU
  +goto MENU
   
  +:Two
   REM Listing possible penetrations
   cd C:\
   echo "STARTING TO OUTPUT PROCESS FILES DIRECTLY TO THE C:\ DRIVE!"
  
positive.code: net accounts /minpwage:1
  REM Display current password policy
  net accounts
  
  
  REM Turn on UAC
  echo "TURNING ON UAC"
  reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System /v EnableLUA /t REG_DWORD /d 1 /f
  
  
  REM No Remote Desktop
  echo "DISABLING REMOTE DESKTOP"
  reg add "HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server" /v fDenyTSConnections /t REG_DWORD /d 1 /f
  reg add "HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp" /v UserAuthentication /t REG_DWORD /d 0 /f
  
  
  REM Windows auomatic updates
  echo "ENABLING AUTO-UPDATES"
  reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update" /v AUOptions /t REG_DWORD /d 3 /f
  
  
  REM Removing good ol' insecure stuff
  echo "DISABLING WEAK SERVICES"
  dism /online /disable-feature /featurename:IIS-WebServerRole >NUL
  
negative.code: if %errorlevel%==1 echo Started processes failed to write
  reg export HKLM\Software\Microsoft\Windows\CurrentVersion\Run  Run.reg
  if %errorlevel%==1 echo Run processes failed to write
  goto MENU
  
  :Three
  echo "OUTPUT DONE, CHANGING PASSWORD POLICIES!"
  REM Passwords must be 10 digits
  net accounts /minpwlen:10
  