Session cookie theft via browser DB access and impossible-travel/concurrent session reuse
Detects browser session-cookie database access followed by session reuse under impossible-travel or concurrent-session conditions, consistent with Gunra's VDI session-hijacking technique.
Microsoft Sentinel (KQL)

