(EventID:3082 OR EventID:3083) (-(FileNameBuffer:system32\\drivers\\vsock.sys OR FileNameBuffer:System32\\drivers\\vmci.sys))