Potential Data Stealing Via Chromium Headless Debugging — Detection Rule

Detects chromium based browsers starting in headless and debugging mode and pointing to a user profile. This could be a sign of data stealing or remote control

Read the full analysis on IntelFusions