Detects process creation with a renamed BrowserCore.exe (used to extract Azure tokens)
Read the full analysis on IntelFusions