(TargetFilename:\\Andrew.dmp OR TargetFilename:\\Coredump.dmp OR TargetFilename:\\lsass.dmp OR TargetFilename:\\lsass.rar OR TargetFilename:\\lsass.zip OR TargetFilename:\\NotLSASS.zip OR TargetFilename:\\PPLBlade.dmp OR TargetFilename:\\rustive.dmp) OR (TargetFilename:\\lsass_2* OR TargetFilename:\\lsassdmp* OR TargetFilename:\\lsassdump*) OR (TargetFilename:\\lsass* TargetFilename:.dmp*) OR (TargetFilename:SQLDmpr* TargetFilename:.mdmp) OR ((TargetFilename:\\nanodump* OR TargetFilename:\\proc_*) TargetFilename:.dmp)