Windows.System.IsClrProcess

https://docs.velociraptor.app/exchange/artifacts/pages/isclrprocess/

Identify running processes that host the .NET Common Language Runtime (CLR) and highlight suspicious processes where CLR visibility may be reduced, downgraded, or disabled.