Skip to content

Hide Navigation Hide TOC

Suspicious Browser Child Process - MacOS (0250638a-2b28-4541-86fc-ea4c558fa0c6)

Detects suspicious child processes spawned from browsers. This could be a result of a potential web browser exploitation.

Cluster A Galaxy A Cluster B Galaxy B Level
Drive-by Compromise - T1189 (d742a578-d70e-4d0e-96a6-02a9c30204e6) Attack Pattern Suspicious Browser Child Process - MacOS (0250638a-2b28-4541-86fc-ea4c558fa0c6) Sigma-Rules 1
Suspicious Browser Child Process - MacOS (0250638a-2b28-4541-86fc-ea4c558fa0c6) Sigma-Rules Command and Scripting Interpreter - T1059 (7385dfaf-6886-4229-9ecd-6fd678040830) Attack Pattern 1
Suspicious Browser Child Process - MacOS (0250638a-2b28-4541-86fc-ea4c558fa0c6) Sigma-Rules Exploitation for Client Execution - T1203 (be2dcee9-a7a7-4e38-afd6-21b31ecc3d63) Attack Pattern 1