(ParentImage:\\node.exe OR ParentImage:\\bun.exe) ((Image:trufflehog.exe OR Image:gitleaks.exe) OR (CommandLine:trufflehog* OR CommandLine:gitleaks*))