(EventID:3033 OR EventID:3034) (-(FileNameBuffer:\\Windows\\assembly\\GAC\\* ProcessNameBuffer:\\mscorsvw.exe ProcessNameBuffer:\\Windows\\Microsoft.NET\\* RequestedPolicy:8)) (-((FileNameBuffer:\\Program\ Files\\DTrace\\dtrace.dll ProcessNameBuffer:\\Windows\\System32\\svchost.exe RequestedPolicy:12) OR (FileNameBuffer:\\Windows\\System32\\DriverStore\\FileRepository\\* FileNameBuffer:\\igd10iumd64.dll RequestedPolicy:7) OR (FileNameBuffer:\\Windows\\System32\\nvspcap64.dll (ProcessNameBuffer:\\AppData\\Local\\Keybase\\Gui\\Keybase.exe OR ProcessNameBuffer:\\Microsoft\\Teams\\stage\\Teams.exe) RequestedPolicy:8) OR (FileNameBuffer:\\Program\ Files\\Bonjour\\mdnsNSP.dll (ProcessNameBuffer:\\Windows\\System32\\svchost.exe OR ProcessNameBuffer:\\Windows\\System32\\SIHClient.exe) (RequestedPolicy:8 OR RequestedPolicy:12)) OR (FileNameBuffer:\\Microsoft\ Office\\root\\vfs\\ProgramFilesCommonX64\\Microsoft\ Shared\\OFFICE* FileNameBuffer:\\MSOXMLMF.DLL RequestedPolicy:7) OR (ProcessNameBuffer:\\Program\ Files\\Microsoft\ Office\\root\\vfs\\ProgramFilesCommonX64\\Microsoft\ Shared\\Office* FileNameBuffer:\\Windows\\System32\\* RequestedPolicy:8) OR (FileNameBuffer:\\Windows\\System32\\nvspcap64.dll ProcessNameBuffer:\\AppData\\Local\\slack\\app\-* ProcessNameBuffer:\\slack.exe RequestedPolicy:8) OR ((FileNameBuffer:\\Mozilla\ Firefox\\mozavcodec.dll OR FileNameBuffer:\\Mozilla\ Firefox\\mozavutil.dll) ProcessNameBuffer:\\Mozilla\ Firefox\\firefox.exe RequestedPolicy:8) OR ((FileNameBuffer:\\Program\ Files\\Avast\ Software\\Avast\\aswAMSI.dll OR FileNameBuffer:\\Program\ Files\ \(x86\)\\Avast\ Software\\Avast\\aswAMSI.dll) (RequestedPolicy:8 OR RequestedPolicy:12)) OR (FileNameBuffer:\\Program\ Files\\Google\\Drive\ File\ Stream\\* FileNameBuffer:\\crashpad_handler.exe ProcessNameBuffer:\\Windows\\ImmersiveControlPanel\\SystemSettings.exe RequestedPolicy:8) OR (FileNameBuffer:\\Trend\ Micro\\Client\ Server\ Security\ Agent\\perficrcperfmonmgr.dll RequestedPolicy:8) OR FileNameBuffer:\\Program\ Files\\National\ Instruments\\Shared\\mDNS\ Responder\\nimdnsNSP.dll\  OR (FileNameBuffer:\\Program\ Files\\McAfee\\Endpoint\ Security\\Threat\ Prevention\\MfeAmsiProvider.dll OR FileNameBuffer:\\Program\ Files\\McAfee\\MfeAV\\AMSIExt.dll) OR FileNameBuffer:\\Program\ Files\\ESET\\ESET\ Security\\eamsi.dll OR FileNameBuffer:\\Program\ Files\\comodo\\comodo\ internet\ security\\amsiprovider_x64.dll OR (FileNameBuffer:\\Program\ Files\\SentinelOne\\Sentinel\ Agent* OR ProcessNameBuffer:\\Program\ Files\\SentinelOne\\Sentinel\ Agent*) OR FileNameBuffer:\\National\ Instruments\\Shared\\mDNS\ Responder\\* OR ((ProcessNameBuffer:\\Kaspersky\ Lab\\* ProcessNameBuffer:\\avp.exe*) OR (FileNameBuffer:\\Kaspersky\ Lab\\* FileNameBuffer:\\antimalware_provider.dll*))))