Kraken Cloudflared Tunnel Persistence
Detects the execution of Cloudflared with command-line arguments associated with creating a persistent tunnel or installing it as a service. This technique is used by the Kraken ransomware group for persistence and command and control.
YARA-L
