(Image:\\logman.exe OR OriginalFileName:Logman.exe) (CommandLine:stop\ * OR CommandLine:delete\ *) (CommandLine:Circular\ Kernel\ Context\ Logger* OR CommandLine:EventLog\-* OR CommandLine:SYSMON\ TRACE* OR CommandLine:SysmonDnsEtwSession*)