((EventID:4656 OR EventID:4663) ObjectType:Key ObjectName:\\REGISTRY\\MACHINE\\SOFTWARE\\Microsoft\\Microsoft\ Online\\Reporting\\MonitoringAgent) (-(ProcessName:Microsoft.Identity.Health.Adfs.DiagnosticsAgent.exe* OR ProcessName:Microsoft.Identity.Health.Adfs.InsightsService.exe* OR ProcessName:Microsoft.Identity.Health.Adfs.MonitoringAgent.Startup.exe* OR ProcessName:Microsoft.Identity.Health.Adfs.PshSurrogate.exe* OR ProcessName:Microsoft.Identity.Health.Common.Clients.ResourceMonitor.exe*))