config case_sensitive = false | preset=xdr_image_load | filter event_type = ENUM.LOAD_IMAGE and 
 (agent_os_type = ENUM.AGENT_OS_WINDOWS and 
 ((action_module_path in ("*\roboform.dll", "*\roboform-x64.dll")) and 
 (not 
 ((actor_process_image_path in (" C:\Program Files (x86)\Siber Systems\AI RoboForm\*", " C:\Program Files\Siber Systems\AI RoboForm\*")) and 
 (actor_process_image_path in ("*\robotaskbaricon.exe", "*\robotaskbaricon-x64.exe"))))))