Browser Launching Screen Sketch (CVE-2026-33829)
Detects instances where a web browser (Chrome, Edge, Firefox, Brave, or Internet Explorer) launches 'ms-screensketch'. This activity is unusual as browsers typically do not directly invoke system utilities like Screen Sketch. This could indicate an attempt to capture screen content, potentially for data exfiltration or reconnaissance, or an unexpected browser behavior.
Microsoft Sentinel (KQL)

