(ParentImage:\\cmd.exe OR ParentImage:\\powershell.exe OR ParentImage:\\pwsh.exe) Image:\\explorer.exe CommandLine:shell\:mycomputerfolder*