MMC Spawning Windows Shell (05a2ab7e-ce11-4b63-86db-ab32e763e11d)

Detects a Windows command line executable started from MMC

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
MMC Spawning Windows Shell (05a2ab7e-ce11-4b63-86db-ab32e763e11d)	Sigma-Rules	Distributed Component Object Model - T1021.003 (68a0c5ed-bee2-4513-830d-5b0d650139bd)	Attack Pattern	1
Distributed Component Object Model - T1021.003 (68a0c5ed-bee2-4513-830d-5b0d650139bd)	Attack Pattern	Remote Services - T1021 (54a649ff-439a-41a4-9856-8d144a2551ba)	Attack Pattern	2