• CommunityEnterprisePlans
  • Intel Exchange
    Intel ExchangeDetections
  • Resources
  • About
  • Leaderboard
Join CommunitySign In
    All Detections

    Debug-Register Hardware Breakpoint Access to Chrome/Edge Process (App-Bound Key

    avatar
    GlassDiceBearhttps://www.dicebear.comhttps://creativecommons.org/publicdomain/zero/1.0/„Glass” (https://www.dicebear.com) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)
    Ibrahim Saud@tektrix
    •updated Sep 22, 2026•0•0•4

    Detects unauthorized processes attempting to open handles to Google Chrome or Microsoft Edge with elevated permissions, specifically accessing thread context (often associated with hardware breakpoints used for process injection or credential extraction techniques).

    Sigma

    Tags

    T1555.003 - Credentials from Web BrowsersT1539 - Steal Web Session CookieT1055 - Process InjectionTA0005 - StealthProcess AccessCredential AccessWindowsWindows Sysmonattack.credential_accessattack.t1555.003attack.t1539attack.t1055

    Found in

    • RevStealer Infostealer Distributed via Trojanized Electron AppsLast updated Sep 22, 2026
    • RevStealer Infostealer Distributed via Trojanized Electron AppsLast updated Sep 22, 2026
    • RevStealer Infostealer Distributed via Trojanized Electron AppsLast updated Sep 22, 2026
    • RevStealer Infostealer Distributed via Trojanized Electron AppsLast updated Sep 22, 2026
    • RevStealer Infostealer Distributed via Trojanized Electron AppsLast updated Sep 22, 2026

    Community Inspired.
    AI Enhanced.
    Better Detections.

    Follow Us

    Company

    • About
    • Leaderboard

    Product

    • Community
    • Enterprise
    • Plans

    © 2026 Copyright. All Rights Reserved.

    Privacy PolicyTerms of Service

    Sign up to view this detection

    or

    Already have an account?