From d1a074b2d3dfb42cfd386882ed09273022edab4e Mon Sep 17 00:00:00 2001
From: 87owo <85057800+87owo@users.noreply.github.com>
Date: Sun, 5 Jul 2026 18:52:14 +0800
Subject: [PATCH] Add files via upload

---
 Plugins/Rules/Rules_Driver_P1.json | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/Plugins/Rules/Rules_Driver_P1.json b/Plugins/Rules/Rules_Driver_P1.json
index b0866c5..bd698eb 100644
--- a/Plugins/Rules/Rules_Driver_P1.json
+++ b/Plugins/Rules/Rules_Driver_P1.json
@@ -15,9 +15,8 @@
                 "*\\PYAS.exe",
             ],
             "CommandLine": [
-                "*taskkill*",
-                "*PYAS.exe*",
-                "*msedgewebview2.exe*",
+                "*taskkill*PYAS.exe*",
+                "*taskkill*msedgewebview2.exe*",
             ],
             "Operations": [
                 "Execute",
@@ -44,6 +43,7 @@
                 "\\Device\\HarddiskVolume*\\Windows\\System32\\lsass.exe",
                 "\\Device\\HarddiskVolume*\\Windows\\System32\\services.exe",
                 "\\Device\\HarddiskVolume*\\Windows\\System32\\svchost.exe",
+                "\\Device\\HarddiskVolume*\\Windows\\SystemApps\\*\\SearchHost.exe",
             ],
             "Target": [
                 "*\\PYAS.exe",