((ParentUser:AUTHORI* OR ParentUser:AUTORI*) (ParentUser:\\NETWORK\ SERVICE OR ParentUser:\\LOCAL\ SERVICE) (User:AUTHORI* OR User:AUTORI*) (User:\\SYSTEM OR User:\\Système OR User:\\СИСТЕМА) (IntegrityLevel:System OR IntegrityLevel:S\-1\-16\-16384)) (-(Image:\\rundll32.exe CommandLine:DavSetCookie*))