((Image:\\cmd.exe OR Image:\\powershell_ise.exe OR Image:\\powershell.exe OR Image:\\pwsh.exe) OR (OriginalFileName:cmd.exe OR OriginalFileName:powershell.exe OR OriginalFileName:powershell_ise.exe OR OriginalFileName:pwsh.dll)) (CommandLine:del\ * OR CommandLine:erase\ * OR CommandLine:rm\ * OR CommandLine:remove\-item\ * OR CommandLine:rmdir\ *) CommandLine:\\inetpub\\logs\\*