Browser Profile Files Accessed on Network Share

Darshan Thummar@Mighty

•updated Jun 10, 2026•0•0•1

This rule detects attempts to access browser profile files, specifically looking for 'AppData' and 'Bookmarks' content, on a network share via SMB. This could indicate an adversary attempting to discover sensitive user data.