Now we see that in our environment we have a big number of different executables and if we include the dlls it's even more we'll need to use the finding a needle in a Hashtag approach and start by adding some more filters,Executed on computers,Popularity,And signature type,