Hide Navigation Hide TOC Renamed Cloudflared.EXE Execution (e0c69ebd-b54f-4aed-8ae3-e3467843f3f0) Detects the execution of a renamed "cloudflared" binary. Cluster A Galaxy A Cluster B Galaxy B Level Renamed Cloudflared.EXE Execution (e0c69ebd-b54f-4aed-8ae3-e3467843f3f0) Sigma-Rules Internal Proxy - T1090.001 (f6dacc85-b37d-458e-b58d-74fc4bbf5755) Attack Pattern 1 Proxy - T1090 (731f4f55-b6d0-41d1-a7a9-072a66389aea) Attack Pattern Internal Proxy - T1090.001 (f6dacc85-b37d-458e-b58d-74fc4bbf5755) Attack Pattern 2