Examples of an ACE condition:

WIN://SYSAPPID Contains Microsoft.549981C3F5F10_8wekyb3d8bbwe
APPID://PATH Contains "%WINDIR%\*
(Exists APPID://SHA256HASH) && (APPID://SHA256HASH Any_of {#5bf6ccc91dd715e18d6769af97dd3ad6a15d2b70326e834474d952753118c670})
(Exists APPID://FQBN) && (APPID://FQBN >= {"O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US\MICROSOFT® WINDOWS ® OPERATING SYSTEM\*", 0})
APPID://PATH Contains "%SYSTEM32%\NOTEPAD.EXE"