CMSTP Execution Registry Event (b6d235fc-1d38-4b12-adbe-325f06728f37)

Detects various indicators of Microsoft Connection Manager Profile Installer execution

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
CMSTP - T1218.003 (4cbc6a62-9e34-4f94-8a19-5c1a11392a49)	Attack Pattern	CMSTP Execution Registry Event (b6d235fc-1d38-4b12-adbe-325f06728f37)	Sigma-Rules	1
CMSTP - T1218.003 (4cbc6a62-9e34-4f94-8a19-5c1a11392a49)	Attack Pattern	System Binary Proxy Execution - T1218 (457c7820-d331-465a-915e-42f85500ccc4)	Attack Pattern	2