CMSTP Execution Process Access — Detection Rule

Detects various indicators of Microsoft Connection Manager Profile Installer execution

Read the full analysis on IntelFusions