diff --git a/Plugins/Rules/Rules_Driver_P1.json b/Plugins/Rules/Rules_Driver_P1.json
index b0866c5..bd698eb 100644
--- a/Plugins/Rules/Rules_Driver_P1.json
+++ b/Plugins/Rules/Rules_Driver_P1.json
@@ -15,9 +15,8 @@
                 "*\\PYAS.exe",
             ],
             "CommandLine": [
-                "*taskkill*",
-                "*PYAS.exe*",
-                "*msedgewebview2.exe*",
+                "*taskkill*PYAS.exe*",
+                "*taskkill*msedgewebview2.exe*",
             ],
             "Operations": [
                 "Execute",
@@ -44,6 +43,7 @@
                 "\\Device\\HarddiskVolume*\\Windows\\System32\\lsass.exe",
                 "\\Device\\HarddiskVolume*\\Windows\\System32\\services.exe",
                 "\\Device\\HarddiskVolume*\\Windows\\System32\\svchost.exe",
+                "\\Device\\HarddiskVolume*\\Windows\\SystemApps\\*\\SearchHost.exe",
             ],
             "Target": [
                 "*\\PYAS.exe",