anchor.diff:  goto:EOF
   
   :firewall
  -echo Enabling firewall..
  +echo Enabling firewall (make sure group policy is allowing modifications to the firewall)
   netsh advfirewall set allprofiles state on
  +echo Firewall enabled
   echo Setting basic firewall rules..
   netsh advfirewall firewall set rule name="Remote Assistance (DCOM-In)" new enable=no 
   netsh advfirewall firewall set rule name="Remote Assistance (PNRP-In)" new enable=no 
  
positive.code: echo Set power settings
  goto:EOF
  
  :::
  :netShare
  echo Echoing network shares to %path%output\shares.txt
  net share > %path%output\shares.txt
  echo Echoed network shares
  goto:EOF
  
  :flushDNS
  echo Flushing DNS...
  ipconfig /flushdns >nul
  echo Flushed DNS
  echo Clearing contents of: C:\Windows\System32\drivers\etc\hosts
  
negative.code: net accounts /lockoutthreshold:5 /MINPWLEN:8 /MAXPWAGE:30 /MINPWAGE:1 /UNIQUEPW:5 
  echo Set password policy: Password policy must meet complexity to enable
  echo Set password policy: Store passwords using reversible encryption to disabled
  echo Secpol.msc will be started for manual process
  start secpol.msc /wait
  pause
  goto:EOF
  
  :audit
  echo Setting auditing success and failure for all categories
  auditpol /set /category:* /success:enable
  auditpol /set /category:* /failure:enable
  echo Set auditing success and failure
  