MiniBrowse browser credential store access and edgeLog.txt exfil staging
This rule detects activities associated with the MiniBrowse tool, specifically targeting unauthorized access to browser credential stores (Login Data, Cookies) and staging files for exfiltration. Additionally, it monitors for process injection events where MiniBrowse components are injected into legitimate browser processes such as Chrome or Edge.
Splunk (SPL)

