Process action type = execution AND os actor process signature vendor != Zscaler, Inc. AND JAL Information Technology Co.,Ltd. AND LIGHTSPEED SYSTEMS, INC. AND Ivanti, Inc. AND Lightspeed Systems (Lightspeed Solutions, LLC.) AND target process cmd = *soundrecorder* Process initiated by != sihost.exe AND svchost.exe AND explorer.exe AND nssm.exe AND cgo name != sihost.exe AND svchost.exe AND explorer.exe AND nssm.exe AND os parent name != sihost.exe AND svchost.exe AND explorer.exe AND nssm.exe AND initiator signature = Unsigned , Signed , Invalid Signature , Weak Hash , cgo signature = Unsigned , Signed , Invalid Signature , Weak Hash , os parent signature = Unsigned , Signed , Invalid Signature , Weak Hash AND initiator signer != Zscaler, Inc. AND JAL Information Technology Co.,Ltd. AND LIGHTSPEED SYSTEMS, INC. AND Ivanti, Inc. AND Lightspeed Systems (Lightspeed Solutions, LLC.) AND cgo signer != Zscaler, Inc. AND JAL Information Technology Co.,Ltd. AND LIGHTSPEED SYSTEMS, INC. AND Ivanti, Inc. AND Lightspeed Systems (Lightspeed Solutions, LLC.) Host host os != linux