(Image:\\MpCmdRun.exe OR Image:\\NisSrv.exe) (-(Image:C\:\\Program\ Files\ \(x86\)\\Windows\ Defender\\* OR Image:C\:\\Program\ Files\\Microsoft\ Security\ Client\\* OR Image:C\:\\Program\ Files\\Windows\ Defender\\* OR Image:C\:\\ProgramData\\Microsoft\\Windows\ Defender\\Platform\\* OR Image:C\:\\Windows\\WinSxS\\*))