BeaverTail/InvisibleFerret Browser Credential Store Access by node or python
Detects unauthorized processes (Node.js or Python) attempting to read sensitive browser credential files or access browser profile directories, often indicative of credential theft malware such as BeaverTail or InvisibleFerret.
Microsoft Sentinel (KQL)
