((OriginalFileName:PingCastleReporting.exe OR OriginalFileName:PingCastleCloud.exe OR OriginalFileName:PingCastle.exe) OR (CommandLine:\-\-scanner\ aclcheck* OR CommandLine:\-\-scanner\ antivirus* OR CommandLine:\-\-scanner\ computerversion* OR CommandLine:\-\-scanner\ foreignusers* OR CommandLine:\-\-scanner\ laps_bitlocker* OR CommandLine:\-\-scanner\ localadmin* OR CommandLine:\-\-scanner\ nullsession* OR CommandLine:\-\-scanner\ nullsession\-trust* OR CommandLine:\-\-scanner\ oxidbindings* OR CommandLine:\-\-scanner\ remote* OR CommandLine:\-\-scanner\ share* OR CommandLine:\-\-scanner\ smb* OR CommandLine:\-\-scanner\ smb3querynetwork* OR CommandLine:\-\-scanner\ spooler* OR CommandLine:\-\-scanner\ startup* OR CommandLine:\-\-scanner\ zerologon*) OR CommandLine:\-\-no\-enum\-limit* OR (CommandLine:\-\-healthcheck* CommandLine:\-\-level\ Full*) OR (CommandLine:\-\-healthcheck* CommandLine:\-\-server\ *)) (-(Image:\\PingCastleReporting.exe OR Image:\\PingCastleCloud.exe OR Image:\\PingCastle.exe))