Non-browser process referencing Chromium IElevator COM CLSIDs (CastleStealer)
Detects the activation or execution of specific COM Class Identifiers (CLSIDs) commonly associated with suspicious activity or living-off-the-land binaries, excluding known benign browser and update processes.
Splunk (SPL)
