(CommandLine:for\ * OR CommandLine:foreach\ *) (CommandLine:nslookup* OR CommandLine:ping*)