References to CVE-2026-4372 Malicious Config Keys

Detects command-line activity referencing the specific internal Transformers configuration keys used to exploit CVE-2026-4372. This may indicate active exploitation or defensive scanning.