Detection of Known Malicious Browser Extensions on Endpoints
Detects endpoint file artifacts associated with known malicious browser extension IDs in browser extension storage paths, indicating possible installation or presence of malicious browser extensions.
Microsoft Sentinel (KQL)
