CVE-2022-30190

• File Creation In Suspicious Directory By Msdt.EXE
• Diagnostic Library Sdiageng.DLL Loaded By Msdt.EXE
• Troubleshooting Pack Cmdlet Execution
• Execute Pcwrun.EXE To Leverage Follina
• Potential Arbitrary Command Execution Using Msdt.EXE
• Suspicious Cabinet File Execution Via Msdt.EXE
• Suspicious MSDT Parent Process
• Sdiagnhost Calling Suspicious Child Process
• Potential Exploitation Attempt From Office Application
• Suspicious Set Value of MSDT in Registry (CVE-2022-30190)