ChromeUpdate scheduled task created via schtasks ONLOGON HIGHEST from Temp proce
Detects the creation of a scheduled task named ChromeUpdate with highest privileges on logon, initiated from a process running within the user AppData\Local\Temp directory.
Microsoft Sentinel (KQL)

