CMSTP Execution Process Creation (7d4cdc5a-0076-40ca-aac8-f7e714570e47)

Detects various indicators of Microsoft Connection Manager Profile Installer execution

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
CMSTP - T1218.003 (4cbc6a62-9e34-4f94-8a19-5c1a11392a49)	Attack Pattern	CMSTP Execution Process Creation (7d4cdc5a-0076-40ca-aac8-f7e714570e47)	Sigma-Rules	1
CMSTP - T1218.003 (4cbc6a62-9e34-4f94-8a19-5c1a11392a49)	Attack Pattern	System Binary Proxy Execution - T1218 (457c7820-d331-465a-915e-42f85500ccc4)	Attack Pattern	2