CVE-2026-4372 PoC File Creation

Detects the creation of the specific PoC proof file (/tmp/hf_rce_poc_proof.txt) generated by the CVE-2026-4372 exploit payload targeting the HuggingFace Transformers library.

Microsoft Sentinel (KQL)