Remcos RAT Browser Credential Theft via Login Data and Cookies Access
Detects suspicious access to web browser credential files (Login Data, Cookies) by processes other than the browsers themselves. This could indicate an attempt to steal stored credentials.
Microsoft Sentinel (KQL)
