https://memv.ennbee.uk/posts/windows-cis-patching-gaps-part2/