Blockchain eth_call command resolution by non-browser process
This rule detects the use of the JSON-RPC 'eth_call' method by a non-browser process during network communication. It specifically looks for network connection events where the initiating process is not a common web browser (Chrome, Edge, Firefox) and the network traffic or command line contains the string '"method":"eth_call"'. This behavior is often associated with malware or cryptocurrency-related threats attempting dynamic command or address resolution.
CQL
