Rust stealer accessing KeePass, SSH, and VPN credential files
Detects access to sensitive credential stores (KeePass databases, Firefox logins, SSH keys, VPN configuration files) by suspicious processes, specifically those associated with potential credential harvesting tools or unauthorized update binaries.
Microsoft Sentinel (KQL)

