Non-browser process accessing browser credential store (MiniBrowse)
Detects unauthorized access to browser-based credential storage files (such as Login Data and cookies) by processes other than recognized browser executables. This behavior is indicative of credential theft or dumping attempts, often performed by malicious software to exfiltrate saved passwords and session cookies.
Sigma
