Rclone Config File Creation (34986307-b7f4-49be-92f3-e7a4d01ac5db)

Detects Rclone config files being created

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Rclone Config File Creation (34986307-b7f4-49be-92f3-e7a4d01ac5db)	Sigma-Rules	Exfiltration to Cloud Storage - T1567.002 (bf1b6176-597c-4600-bfcd-ac989670f96b)	Attack Pattern	1
Exfiltration Over Web Service - T1567 (40597f16-0963-4249-bf4c-ac93b7fb9807)	Attack Pattern	Exfiltration to Cloud Storage - T1567.002 (bf1b6176-597c-4600-bfcd-ac989670f96b)	Attack Pattern	2