Cloudflared Executable Masquerading Detected
Flags executables whose embedded metadata identifies them as Cloudflared while the filename differs from expected distribution names, suggesting potential evasion through binary renaming.
Microsoft Sentinel (KQL)

