Malicious Chrome Extension flkebkiofojicogddingbdmcmkpbplcd declarativeNetRequest Intercept
Detects the presence of known malicious Chrome extension IDs, suspicious configuration files (e.g., perplexity-rules.json, bing-rules.json), or extensions utilizing invasive declarativeNetRequest permissions, which are often used for browser-based exfiltration or credential interception.
Splunk (SPL)

