(Image:\\Seatbelt.exe OR OriginalFileName:Seatbelt.exe OR Description:Seatbelt OR (CommandLine:\ DpapiMasterKeys* OR CommandLine:\ InterestingProcesses* OR CommandLine:\ InterestingFiles* OR CommandLine:\ CertificateThumbprints* OR CommandLine:\ ChromiumBookmarks* OR CommandLine:\ ChromiumHistory* OR CommandLine:\ ChromiumPresence* OR CommandLine:\ CloudCredentials* OR CommandLine:\ CredEnum* OR CommandLine:\ CredGuard* OR CommandLine:\ FirefoxHistory* OR CommandLine:\ ProcessCreationEvents*)) OR ((CommandLine:\ \-group=misc* OR CommandLine:\ \-group=remote* OR CommandLine:\ \-group=chromium* OR CommandLine:\ \-group=slack* OR CommandLine:\ \-group=system* OR CommandLine:\ \-group=user* OR CommandLine:\ \-group=all*) CommandLine:\ \-outputfile=*)