Suspicious Browser-Triggered Payload Execution

Siva prasad@sivaprasad

•updated Dec 28, 2025•17•0•188

Detects unexpected file creation and execution originating from common browser processes (e.g., Chrome, Firefox, Edge) combined with anomalous network content that may indicate injected payloads served via web traffic. Based on MITRE DET0349 detection guidance.