(EventID:1121 Path:\\lsass.exe) (-((ProcessName:C\:\\Windows\\Temp\\asgard2\-agent\\* (ProcessName:\\thor64.exe OR ProcessName:\\thor.exe)) OR (ProcessName:C\:\\Windows\\System32\\atiesrxx.exe OR ProcessName:C\:\\Windows\\System32\\CompatTelRunner.exe OR ProcessName:C\:\\Windows\\System32\\msiexec.exe OR ProcessName:C\:\\Windows\\System32\\nvwmi64.exe OR ProcessName:C\:\\Windows\\System32\\svchost.exe OR ProcessName:C\:\\Windows\\System32\\Taskmgr.exe OR ProcessName:C\:\\Windows\\System32\\wbem\\WmiPrvSE.exe OR ProcessName:C\:\\Windows\\SysWOW64\\msiexec.exe) OR (ProcessName:C\:\\Windows\\System32\\DriverStore\\* OR ProcessName:C\:\\WINDOWS\\Installer\\* OR ProcessName:C\:\\Program\ Files\\* OR ProcessName:C\:\\Program\ Files\ \(x86\)\\*)))