SGWebRender.exe CEF renderer launched with insecure hardcoded switches
Detects the execution of SGWebRender.exe with command-line arguments that weaken browser security, such as disabling web security, allowing file access, or disabling the sandbox. These flags are often used to facilitate malicious activity, such as bypassing cross-origin policies, accessing sensitive local files, or executing malicious code without sandbox constraints.
Microsoft Sentinel (KQL)
