Registry Query of Chrome App Paths Key by Non-Browser Process
Detects registry query operations targeting the App Paths registry keys for Google Chrome and Microsoft Edge by processes other than the browsers themselves. This behavior is often indicative of reconnaissance or software discovery activities where an adversary attempts to identify installed browser locations, which may be a precursor to browser-based attacks such as credential theft or browser hijacking.
Sigma
