Using Application and Device Control to stop registry entries added by a threat or risk