Renamed PingCastle Binary Execution (2433a154-bb3d-42e4-86c3-a26bdac91c45)

Detects the execution of a renamed "PingCastle" binary based on the PE metadata fields.

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Renamed PingCastle Binary Execution (2433a154-bb3d-42e4-86c3-a26bdac91c45)	Sigma-Rules	Indirect Command Execution - T1202 (3b0e52ce-517a-4614-a523-1bd5deef6c5e)	Attack Pattern	1
Renamed PingCastle Binary Execution (2433a154-bb3d-42e4-86c3-a26bdac91c45)	Sigma-Rules	Command and Scripting Interpreter - T1059 (7385dfaf-6886-4229-9ecd-6fd678040830)	Attack Pattern	1