In the 7.9.0-svr EDR version, the Process Search query window does not recognize when the space bar is used and values appear input as one line.
"process_name:notepad.exeAND"
This is a UI issue that is scheduled to be fixed in 7.9.1-svr EDR version. The suggested workaround is to enter the query in its entirety as one long string, then go back and add the spaces where needed between fields.
7.9.1-svr EDR is tentatively scheduled for release in February 2026.