Cloudflared Portable Execution (fadb84f0-4e84-4f6d-a1ce-9ef2bffb6ccd)

Detects the execution of the "cloudflared" binary from a non standard location.

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Cloudflared Portable Execution (fadb84f0-4e84-4f6d-a1ce-9ef2bffb6ccd)	Sigma-Rules	Internal Proxy - T1090.001 (f6dacc85-b37d-458e-b58d-74fc4bbf5755)	Attack Pattern	1
Proxy - T1090 (731f4f55-b6d0-41d1-a7a9-072a66389aea)	Attack Pattern	Internal Proxy - T1090.001 (f6dacc85-b37d-458e-b58d-74fc4bbf5755)	Attack Pattern	2