On Sun, 21 Oct 2018 12:47:03 -0400, Paul wrote:

Windows Defender.

Search Indexer.

You can use Sysinternals Process Monitor to do a boot trace.
[snip]

Basically, all services whose Startup-Type is configured as Automatic.
Including scheduled tasks which are configured to run at computer startup.