File Download with Headless Browser
Detects the execution of Chromium-based browsers (Brave, Chrome, MS Edge, Opera, Vivaldi) in headless mode using the "dump-dom" command-line argument. This technique can be used to download files or extract content from web pages without a visible browser interface, often for malicious purposes like data exfiltration or staging.
Sigma
