Non-browser process accessing browser credential stores and Discord tokens
Detects non-browser processes accessing sensitive browser-stored credential and cookie databases concurrently with access to Discord local storage, which is a common behavior of information-stealing malware (e.g., x47.c) to aggregate credentials for exfiltration.
Microsoft Sentinel (KQL)
