Skip to content

Hide Navigation Hide TOC

SQLite Chromium Profile Data DB Access (24c77512-782b-448a-8950-eddb0785fc71)

Detect usage of the "sqlite" binary to query databases in Chromium-based browsers for potential data stealing.

Cluster A Galaxy A Cluster B Galaxy B Level
Credentials from Web Browsers - T1555.003 (58a3e6aa-4453-4cc8-a51f-4befe80b31a8) Attack Pattern SQLite Chromium Profile Data DB Access (24c77512-782b-448a-8950-eddb0785fc71) Sigma-Rules 1
Steal Web Session Cookie - T1539 (10ffac09-e42d-4f56-ab20-db94c67d76ff) Attack Pattern SQLite Chromium Profile Data DB Access (24c77512-782b-448a-8950-eddb0785fc71) Sigma-Rules 1
Data from Local System - T1005 (3c4a2599-71ee-4405-ba1e-0e28414b4bc5) Attack Pattern SQLite Chromium Profile Data DB Access (24c77512-782b-448a-8950-eddb0785fc71) Sigma-Rules 1
Credentials from Web Browsers - T1555.003 (58a3e6aa-4453-4cc8-a51f-4befe80b31a8) Attack Pattern Credentials from Password Stores - T1555 (3fc9b85a-2862-4363-a64d-d692e3ffbee0) Attack Pattern 2