Forced Chrome/Edge extension install policy registry changes (RedDirection)

ills3c Intel&Coffee@Ills3C

•updated 14 days ago•0•0•1

Detects registry modifications related to Google Chrome and Microsoft Edge extension force-install policies (ExtensionInstallForcelist or ExtensionSettings) by processes other than svchost.exe. Attackers may abuse this to install malicious browser extensions for persistence or credential harvesting.