(Image:\\reg.exe OR OriginalFileName:reg.exe) (CommandLine:Microsoft\\Windows\\WindowsAI* CommandLine:DisableAIDataAnalysis*) ((CommandLine:add* OR CommandLine:0*) OR CommandLine:delete*)