File: C:/Windows/System32/migwiz/replacementmanifests/Security-Malware-Windows-Defender-Repl.man
<?xml version='1.0' encoding='utf-8' standalone='yes'?>
<assembly
xmlns="urn:schemas-microsoft-com:asm.v3"
xmlns:xsd="http://www.w3.org/2001/XMLSchema"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
manifestVersion="1.0"
>
<assemblyIdentity
language="neutral"
name="Security-Malware-Windows-Defender"
processorArchitecture="*"
version="0.0.0.0"
/>
<migration
replacementSettingsVersionRange="0-1"
scope="Upgrade,MigWiz,USMT"
settingsVersion="2">
<machineSpecific>
<migXml xmlns="">
<rules context="System">
<include>
<objectSet>
<pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows Defender\* [*]</pattern>
<pattern type="File">%CSIDL_COMMON_APPDATA%\Microsoft\Windows Defender\Support\* [*]</pattern>
<pattern type="File">%CSIDL_COMMON_APPDATA%\Microsoft\Windows Defender\Clean Store\* [*]</pattern>
<pattern type="File">%CSIDL_COMMON_APPDATA%\Microsoft\Windows Defender\Definition Updates\* [*]</pattern>
<pattern type="File">%CSIDL_COMMON_APPDATA%\Microsoft\Windows Defender\LocalCopy\* [*]</pattern>
<pattern type="File">%CSIDL_COMMON_APPDATA%\Microsoft\Windows Defender\Platform\* [*]</pattern>
<pattern type="File">%CSIDL_COMMON_APPDATA%\Microsoft\Windows Defender\Quarantine\* [*]</pattern>
<pattern type="File">%CSIDL_COMMON_APPDATA%\Microsoft\Windows Defender\Scans\* [*]</pattern>
<pattern type="File">%CSIDL_COMMON_APPDATA%\Microsoft\Windows Defender\Network Inspection System\Support\* [*]</pattern>
</objectSet>
</include>
<exclude>
<objectSet>
<pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows Defender\Scan [SFCState]</pattern>
<pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows Defender [OneTimeSqmDataSent]</pattern>
<pattern type="File">%CSIDL_COMMON_APPDATA%\Microsoft\Windows Defender\Definition Updates\Default\* [*]</pattern>
</objectSet>
</exclude>
<merge script="MigXmlHelper.SourcePriority()">
<objectSet>
<pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows Defender\* [*]</pattern>
<pattern type="File">%CSIDL_COMMON_APPDATA%\Microsoft\Windows Defender\* [*]</pattern>
</objectSet>
</merge>
</rules>
</migXml>
</machineSpecific>
</migration>
</assembly>