Rust stealer (NeedleStealer) accessing Discord/Telegram/Steam data
Detects unauthorized processes attempting to access sensitive application data files such as browser cookies, local state, or data stored by applications like Discord, Telegram, and Steam, which are frequent targets for credential-stealing malware.
Microsoft Sentinel (KQL)

