ParentImage:\\svchost.exe Image:\\svchost.exe ParentCommandLine:\-k\ DHCPServer* CommandLine:\-k\ DHCPServer* (User:NETWORK\ SERVICE* OR User:NETZWERKDIENST* OR User:SERVIZIO\ DI\ RETE* OR User:SERVICIO\ DE\ RED*)