ErrTraffic ClickFix PowerShell Spawned from Browser Process
Detects instances where browser processes (Chrome, Edge, Firefox) directly spawn PowerShell or MSHTA. This is a behavioral indicator of the 'ClickFix' social engineering technique, where victims are tricked into copying and pasting malicious commands into a terminal, often presented as 'fixes' for fake browser error messages or verification prompts.
YARA-L
