NotDoor behavior pattern

This query identifies an anomalous pattern associated with behavior performed by NotDoor to establish persistence and avoid its detection.