Executable File Creation by Browser or Email Client

nomit vyas@xoxo

•updated Jun 21, 2026•1•0•10

Detects the creation of executable files (exe, dll, bat, ps1, vbs, msi, lnk) by common web browsers (Chrome, Firefox, Edge, Internet Explorer) or email clients (Outlook). This activity can indicate a user downloading or receiving a potentially malicious file, which could lead to initial access or further compromise.