Data:HostName=ConsoleHost* (-((Data:HostApplication=powershell* OR Data:HostApplication=C\:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell* OR Data:HostApplication=C\:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell* OR Data:HostApplication=C\:\/Windows\/System32\/WindowsPowerShell\/v1.0\/powershell* OR Data:HostApplication=C\:\/Windows\/SysWOW64\/WindowsPowerShell\/v1.0\/powershell* OR Data:HostApplication=C\:\\\\WINDOWS\\\\system32\\\\WindowsPowerShell\\\\v1.0\\\\powershell.exe* OR Data:HostApplication=C\:\\\\WINDOWS\\\\SysWOW64\\\\WindowsPowerShell\\\\v1.0\\\\powershell.exe*) OR Data:HostId=[a-zA-Z0-9-]{36}\\s+EngineVersion=))