ParentImage:\\w3wp.exe ParentCommandLine:moveitdmz\ pool* Image:\\csc.exe