BragJack: Chrome/Comet browser process generating screenshots without user interaction
Detects instances where browser processes (chrome.exe or comet.exe) create multiple screenshot-related files in quick succession without apparent user interaction, a behavior pattern observed in the BragJack attack chain associated with hijacked browser AI agents.
Microsoft Sentinel (KQL)

