PlugX Client Identity Registry Key Creation/Modification
Detects the creation or modification of the non-standard registry key (ms-pu\CLSID) used by the Mustang Panda PlugX variant to store its 16-character hex client identifier. This specific registry path is highly indicative of PlugX activity.
Microsoft Sentinel (KQL)
