(Image:\\schtasks.exe CommandLine:\ \/create\ *) (-(User:AUTHORI* OR User:AUTORI*)) (-((ParentImage:C\:\\Program\ Files\\Microsoft\ Office\\root\\integration\\integrator.exe OR ParentImage:C\:\\Program\ Files\ \(x86\)\\Microsoft\ Office\\root\\integration\\integrator.exe) (Image:C\:\\Windows\\System32\\schtasks.exe OR Image:C\:\\Windows\\SysWOW64\\schtasks.exe) CommandLine:Microsoft\\Office\\Office\ Performance\ Monitor*))