((Image:\\AgentExecutor.exe OR OriginalFileName:AgentExecutor.exe) (CommandLine:\ \-powershell* OR CommandLine:\ \-remediationScript*)) (-ParentImage:\\Microsoft.Management.Services.IntuneWindowsAgent.exe)