((ParentImage:\\ManageEngine\\ServiceDesk\\* ParentImage:\\java.exe*) (Image:\\AppVLP.exe OR Image:\\bash.exe OR Image:\\bitsadmin.exe OR Image:\\calc.exe OR Image:\\certutil.exe OR Image:\\cscript.exe OR Image:\\curl.exe OR Image:\\forfiles.exe OR Image:\\mftrace.exe OR Image:\\mshta.exe OR Image:\\net.exe OR Image:\\net1.exe OR Image:\\notepad.exe OR Image:\\powershell.exe OR Image:\\pwsh.exe OR Image:\\query.exe OR Image:\\reg.exe OR Image:\\schtasks.exe OR Image:\\scrcons.exe OR Image:\\sh.exe OR Image:\\systeminfo.exe OR Image:\\whoami.exe OR Image:\\wmic.exe OR Image:\\wscript.exe)) (-((Image:\\net.exe OR Image:\\net1.exe) CommandLine:\ stop*))