BioShocking: Browser Process Reading On-Disk Credential or Secret Files
Detects when common web browsers (chrome.exe, msedge.exe, brave.exe, electron.exe) access local files that appear to contain sensitive credentials, secrets, tokens, or API keys based on file naming conventions and directory structures.
Microsoft Sentinel (KQL)

