((ParentImage:\\cmd.exe OR Image:\\cmd.exe OR OriginalFileName:cmd.exe) ((ParentCommandLine:\/c* OR ParentCommandLine:\/k* OR ParentCommandLine:\/r*) OR (CommandLine:\/c* OR CommandLine:\/k* OR CommandLine:\/r*)) (ParentCommandLine:\/..\/..\/ OR CommandLine:\/..\/..\/*)) (-CommandLine:\\Tasktop\\keycloak\\bin\\\/..\/..\/jre\\bin\\java*)