(Image:\\netsh.exe OR OriginalFileName:netsh.exe) (CommandLine:\ i* CommandLine:\ p* CommandLine:=3389* CommandLine:\ c*)