FlutterShell notarised app WebView command bridge
This rule flags a notarised macOS Flutter application whose web view can trigger command execution. Apple notarisation does not guarantee good intent. Investigate any unfamiliar app with this pattern. Ask the person who used the computer whether they installed new software or clicked a link, and involve your security team if the answer is unclear.
Microsoft Sentinel (KQL)
