(ScriptBlockText:get\-process\ |\ ?* OR ScriptBlockText:get\-process\ |\ where* OR ScriptBlockText:gps\ |\ ?* OR ScriptBlockText:gps\ |\ where*) (ScriptBlockText:Company\ \-like* OR ScriptBlockText:Description\ \-like* OR ScriptBlockText:Name\ \-like* OR ScriptBlockText:Path\ \-like* OR ScriptBlockText:Product\ \-like*) (ScriptBlockText:\*avira\** OR ScriptBlockText:\*carbonblack\** OR ScriptBlockText:\*cylance\** OR ScriptBlockText:\*defender\** OR ScriptBlockText:\*kaspersky\** OR ScriptBlockText:\*malware\** OR ScriptBlockText:\*sentinel\** OR ScriptBlockText:\*symantec\** OR ScriptBlockText:\*virus\**)