Infostealer Access to Browser Credential and Cookie Stores
Detects unauthorized processes attempting to access sensitive local browser files (credential stores, cookies, and local state databases) associated with Chrome, Edge, Brave, Chromium, and Firefox. Such access is a primary indicator of infostealer malware attempting to harvest saved credentials and session cookies from a victim's machine.
Sigma
