1 Batch file contains:

Line 4 overrides a file
Line 5 copies all files in the policies folder
Line 6 new trusted provider for the user
Line 10 disabled protection on the dominion databases
Line 12 disabled encryption on all the databases
Line 13-15 restart sql so the new setting take effect

What it is doing... to see and change information midstream

Supersocket LIne of code
-------------------
*** This is the most common forensic image in the world and cannot be changed.