Windows Incident Response: Does "Autostart" Really Mean "Aut