Access To Browser Credential Files By Uncommon Applications
Detects file access requests to browser credential stores by uncommon processes. This could indicate a potential attempt at credential stealing. This rule requires heavy baselining before usage.
Sigma
