Repeated Termination of CloudTelemetryService via Kill Loop (XCSSET v40)
Detects a repeated/looped termination pattern against the CloudTelemetryService process, matching XCSSET's continuous loop that blocks security telemetry from reaching Apple.
Microsoft Sentinel (KQL)

