TargetFilename:\\Windows\\System32\\CodeIntegrity\\* (-((Image:\\Microsoft.ConfigurationManagement.exe OR Image:\\WDAC\ Wizard.exe OR Image:C\:\\Program\ Files\\PowerShell\\7\-preview\\pwsh.exe OR Image:C\:\\Program\ Files\\PowerShell\\7\\pwsh.exe OR Image:C\:\\Windows\\System32\\dllhost.exe OR Image:C\:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell_ise.exe OR Image:C\:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe OR Image:C\:\\Windows\\SysWOW64\\dllhost.exe OR Image:C\:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell_ise.exe OR Image:C\:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe) OR ((CommandLine:ConvertFrom\-CIPolicy\ \-XmlFilePath* CommandLine:\-BinaryFilePath\ *) OR CommandLine:CiTool\ \-\-update\-policy* OR (CommandLine:Copy\-Item\ \-Path* CommandLine:\-Destination*)) OR Image:System OR Image:C\:\\Windows\\System32\\wuauclt.exe OR (Image:C\:\\Windows\\UUS\\arm64\\wuaucltcore.exe OR Image:C\:\\Windows\\UUS\\Packages\\Preview\\arm64\\wuaucltcore.exe)))