Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
2 detections
Filters
Last updated
All Time
Detection languages
1
1
Contributors
2
Categories
2
1
1
1
Platforms
2
1
1
Products / Services
2
1
1
MITRE Techniques
2
1
1
1
1
CVEs
71
71
64
58
49
Detects the execution of specific web browsers (Chrome, Edge, Opera) to facilitate identification of vulnerable browser versions as indicated by CVE-2026-0628 and CVE-2026-55945. This rule does not perform version checking directly but serves as a telemetry trigger for external asset inventory correlation.
Detects the execution of a Google Chrome process on a system with a known vulnerability (versions below 143.0.7499.192) in conjunction with browser extension installation or loading activity. This behavior is indicative of the GlicJack exploit (CVE-2026-0628), where a malicious extension attempts to impersonate a trusted AI vendor server to send unauthorized commands to the in-browser AI agent.