Salat Stealer masqueraded Lightshot.exe in browser and system directories
Detects Salat Stealer dropping and executing copies of Lightshot.exe in trusted directories such as Windows NT, Edge, and Chrome application paths, as well as process spawn chains involving masqueraded Lightshot executables.
Microsoft Sentinel (KQL)
