PowerShell Terminates chrome.exe via CIM Instance Query and Stop-Process
Detects the use of PowerShell cmdlets 'Get-CimInstance' and 'Stop-Process' to identify and terminate chrome.exe processes. This behavior may be used by adversaries to stop browsers or security software components that could interfere with malicious activities.
Microsoft Sentinel (KQL)
