Non-browser process accessing Chrome/Brave/Edge Login Data credential store
Detects unauthorized processes accessing browser credential databases (e.g., 'Login Data') used by Google Chrome, Brave, and Microsoft Edge. This activity is a common indicator of credential theft by malicious software.
Microsoft Sentinel (KQL)

