T1539 Steal Web Session Cookie
An adversary may steal web application or service session cookies and use them to gain access to web applications or Internet services as an authenticated user without needing credentials. MITRE ATT&CK
2 Sigma rules T1539 on attack.mitre.org