Suspicious Headless Chrome Process Execution with VOLTA Infostealer Artifacts
Detects the execution of the Google Chrome browser in headless mode using command-line arguments indicative of infostealer activity (specifically containing 'vt_udd_'), where the process is not initiated by standard parent applications like Chrome itself, Edge, or Explorer.
Microsoft Sentinel (KQL)

