(CommandLine:lsass.dmp* OR CommandLine:lsass.zip* OR CommandLine:lsass.rar* OR CommandLine:Andrew.dmp* OR CommandLine:Coredump.dmp* OR CommandLine:NotLSASS.zip* OR CommandLine:lsass_2* OR CommandLine:lsassdump* OR CommandLine:lsassdmp*) OR (CommandLine:lsass* CommandLine:.dmp*) OR (CommandLine:SQLDmpr* CommandLine:.mdmp*) OR (CommandLine:nanodump* CommandLine:.dmp*)