Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

1 detection

Detects a non-browser process directly querying the Chrome/Brave/Edge SQLite Login Data store with the exact origin_url/username_value SELECT statements used by the botking RAT to harvest saved credentials.
avatar
Duo Tech@duotech
avatar
Detections.ai Community
2 months ago
005