attack.t1185 | Detection.FYI

Browser Started with Remote Debugging

Nov 2, 2023 · attack.credential_access attack.t1185 ·
Share on:

Detects browsers starting with the remote debugging flags. Which is a technique often used to perform browser injection attacks

Read More
Potential Data Stealing Via Chromium Headless Debugging

Nov 2, 2023 · attack.credential_access attack.t1185 ·
Share on:

Detects chromium based browsers starting in headless and debugging mode and pointing to a user profile. This could be a sign of data stealing or remote control

Read More