Non-browser process touching iPhone backups, Slack data and Roblox API (VOLTA)
Detects processes (excluding common legitimate ones like browsers or backup tools) that access sensitive local data such as iPhone MobileSync backups or Slack workspace storage, while simultaneously initiating network connections to roblox.com.
Microsoft Sentinel (KQL)

