Binary or script signed by compromised eMudhra OV CS CA intermediate
Detects files whose Authenticode signatures chain to compromised eMudhra OV Code Signing intermediate certificates (G3B/G3C) whose private keys were recovered.
Microsoft Sentinel (KQL)

