| elastic |
Manual Loading of a Suspicious Chromium Extension |
production |
2026-09-18 |
| elastic |
Browser Process Spawned from an Unusual Parent |
production |
2026-09-18 |
| splunk |
Windows Browser Process Launched with Unusual Flags |
production |
2026-06-25 |
| splunk |
AWS Concurrent Sessions From Different Ips |
production |
2026-05-13 |
| splunk |
Azure AD Concurrent Sessions From Different Ips |
production |
2026-05-13 |
| splunk |
O365 Concurrent Sessions From Different Ips |
production |
2026-05-13 |
| splunk |
Windows Chromium Process Loaded Extension via Command-Line |
production |
2026-05-13 |
| splunk |
ASL AWS Concurrent Sessions From Different Ips |
production |
2026-05-13 |
| splunk |
Windows Chrome Auto-Update Disabled via Registry |
production |
2026-05-13 |
| splunk |
Windows Chrome Enable Extension Loading via Command-Line |
production |
2026-05-13 |
| splunk |
Windows Chrome Extension Allowed Registry Modification |
production |
2026-05-13 |
| sigma |
Potential Data Stealing Via Chromium Headless Debugging |
test |
2022-12-23 |
| sigma |
Browser Started with Remote Debugging |
test |
2022-12-23 |