config case_sensitive = false | preset=xdr_image_load | filter event_type = ENUM.LOAD_IMAGE and 
 (agent_os_type = ENUM.AGENT_OS_WINDOWS and 
 (action_module_path contains "\dbgmodel.dll" and 
 (not 
 (action_module_path in ("C:\Windows\System32\*", "C:\Windows\SysWOW64\*", "C:\Windows\WinSxS\*"))) and 
 (not 
 (action_module_path contains "C:\Program Files\WindowsApps\Microsoft.WinDbg_" or 
 (action_module_path in ("C:\Program Files (x86)\Windows Kits\*", "C:\Program Files\Windows Kits\*"))))))