Infostealer Browser Credential File Access via Non-Browser Process
Detects unauthorized access to sensitive browser credential files (Login Data, Cookies, logins.json) by processes other than standard browsers or known security products. This activity is a common indicator of credential harvesting by infostealer malware families aiming to compromise saved passwords and session cookies.
Sigma
