Detects the creation of taskmgr.exe process in context of LOCAL_SYSTEM
Read the full analysis on IntelFusions