Potential privilege escalation via CVE-2022-38028

file where file.path : "C:\\*\\Windows\\system32\\DriVerStoRe\\FiLeRePoSiToRy\\*\\MPDW-constraints.js" and
 not user.id : "S-1-5-18" and
 not file.path : "C:\\$WINDOWS.~BT\\NewOS\\Windows\\System32\\DriverStore\\FileRepository\\prnms*\\MPDW-constraints.js" and
 not process.executable : ("C:\\Windows\\System32\\taskhostw.exe",
                           "C:\\Program Files\\Azure\\StorageSyncAgent\\FileSyncSvc.exe",
                           "C:\\Program Files (x86)\\IDriveWindows\\id_bglaunch.exe",
                           "C:\\Program Files (x86)\\IBackupWindows\\ib_bglaunch.exe",
                           "C:\\Windows\\System32\\SystemSettingsAdminFlows.exe",
                           "C:\\Windows\\ImmersiveControlPanel\\SystemSettings.exe",
                           "C:\\Program Files\\Microsoft Deployment Toolkit\\Bin\\Microsoft.BDD.Catalog40.exe",
                           "C:\\Program Files (x86)\\Windows Kits\\10\\Assessment and Deployment Kit\\Deployment Tools\\WSIM\\x86\\imagecat.exe",
                           "C:\\$WINDOWS.~BT\\Sources\\SetupHost.exe",
                           "C:\\Windows\\System32\\cleanmgr.exe")