(ParentImage:\\ITSMService.exe Image:\\ssh\-shellhost.exe CommandLine:\-\-pty*) (CommandLine:bash* OR CommandLine:cmd* OR CommandLine:powershell* OR CommandLine:pwsh*)