Diagnostic Tool Termination via Taskkill (Mustang Panda PlugX)
Detects the execution of taskkill.exe targeting the iediagcmd.exe diagnostic tool. This defense evasion action is performed by the PlugX payload prior to establishing a C2 communication channel to prevent network diagnostic monitoring.
Microsoft Sentinel (KQL)
