File Download with Headless Browser — Detection Rule

Detects execution of chromium based browser in headless mode using the "dump-dom" command line to download files

Read the full analysis on IntelFusions