Non-Browser Process Accessing Chromium Credential Store Files
Detects instances where processes other than common Chromium-based web browsers attempt to access sensitive files within the browser's User Data directory, such as Login Data, Cookies, or Web Data. This behavior is often indicative of credential theft or session hijacking attempts by unauthorized software or adversaries.
Sigma

