Creating an exception based on the tigger event field

[Siumot 0]

The remote serial port device software performs CodeInjection on multiple processes/programs. Creating exceptions based on processes is not optimal, because I would have to write a lot of such exceptions, or make a very extensive logical OR section, and some process could be missing all the time. Is it possible to make an exception based on matching text in the TRIGGER EVENT field? Below is an example of our detections.