ShapedPlugin - Install-Persistent.php execution by Cron/Schtasks
Detects if the backdoor file 'install-persistent.php' is scheduled for persistence via cron or Windows scheduled tasks. This indicates a potential supply chain compromise targeting ShapedPlugin.
Microsoft Sentinel (KQL)

