Microsoft Teams Sensitive File Access By Uncommon Applications — Detection Rule

Detects file access attempts to sensitive Microsoft teams files (leveldb, cookies) by an uncommon process.

Read the full analysis on IntelFusions