I want to create an 'Inverse Monitor". I do not want WIndows Defender service running on any of my systems. I need to monitor for "WinDefend" and create an alert if it is found to be running. I do not want to be notified for every server in my environment where it is not running.