osQuery Management Server (Prime).Extended Antivirus Process Check (SQLite SQL Statements)
SELECT pid, name, cmdline
FROM processes
WHERE name LIKE '%clamd%'
OR name LIKE '%Sophos%'
OR name LIKE '%avast%'
OR name LIKE '%McAfee%'
OR name LIKE '%defender%';