(((Image:\\cacls.exe OR Image:\\icacls.exe OR Image:\\net.exe OR Image:\\net1.exe) (CommandLine:\/grant* OR CommandLine:\/setowner* OR CommandLine:\/inheritance\:r*)) OR (Image:\\attrib.exe CommandLine:\-r*) OR Image:\\takeown.exe) (-(CommandLine:ICACLS\ C\:\\ProgramData\\dynatrace\\gateway\\config\\connectivity.history\ \/reset OR (CommandLine:ICACLS\ C\:\\ProgramData\\dynatrace\\gateway\\config\\config.properties\ \/grant\ \:r\ * CommandLine:S\-1\-5\-19\:F*) OR (CommandLine:\\AppData\\Local\\Programs\\Microsoft\ VS\ Code* OR CommandLine:\:\\Program\ Files\\Microsoft\ VS\ Code*) OR (CommandLine:\:\\Program\ Files\ \(x86\)\\Avira* OR CommandLine:\:\\Program\ Files\\Avira*)))