(Payload:get\-ADPrincipalGroupMembership* OR ContextInfo:get\-ADPrincipalGroupMembership*) OR ((Payload:get\-aduser* Payload:\-f\ * Payload:\-pr\ * Payload:DoesNotRequirePreAuth*) OR (ContextInfo:get\-aduser* ContextInfo:\-f\ * ContextInfo:\-pr\ * ContextInfo:DoesNotRequirePreAuth*))