Opera GX High-Frequency Outbound Requests Indicative of CSS Trigram XS-Leak Exfiltration
Detects high-volume, rapid outbound network requests from Opera or Opera GX browser processes, characteristic of CSS attribute-selector trigram enumeration used in XS-Leak attacks to exfiltrate sensitive information from loaded web pages.
Microsoft Sentinel (KQL)
