Process enumerating installed software and browser data with periodic daily beacon (AI Profiler)
Detects suspicious processes that repeatedly enumerate installed software via registry Uninstall keys and access sensitive browser data (History, cookies, and web-data files) over a period of multiple days, while simultaneously generating consistent outbound network beaconing. This behavior is indicative of data-stealing malware, such as the Dolphin X 'AI Profiler', which profiles victims based on their application usage and browsing habits.
Microsoft Sentinel (KQL)
