AutoHotkey stager self-deletion via delayed cmd timeout/del chain
Detects a cmd.exe process using a delayed timeout/del cleanup chain to self-delete the AutoHotkey stager executable and .ahk staging script associated with the UNC6692 Edgecution malware suite, indicating anti-forensic removal of initial staging artifacts after payload deployment.
Microsoft Sentinel (KQL)
