(Image:\\pwsh.exe OR OriginalFileName:pwsh.dll) (CommandLine:\-SecurityDescriptorSddl\ * OR CommandLine:\-sd\ *) ((CommandLine:Set\-Service\ * CommandLine:D;;*) (CommandLine:;;;IU* OR CommandLine:;;;SU* OR CommandLine:;;;BA* OR CommandLine:;;;SY* OR CommandLine:;;;WD*))