(OriginalFileName:wmic.exe OR Image:\\WMIC.exe) CommandLine:\/Namespace\:\\\\root\\Microsoft\\Windows\\Defender*