Detection of Malicious Browser Extensions and Associated Network Connections
This rule detects the presence of potentially malicious or unwanted browser extensions and outbound network connections to known adware or tracking domains. It correlates extension presence with network behavior to identify threats.
Microsoft Sentinel (KQL)
