(EventID:1119 SourceName:Real\-Time\ Protection) ((Path:\\TieringEngineService.exe ThreatName:EICAR_Test_File) OR ProcessName:\\RedSun.exe)