MITRE ATT&CK technique
T1113
Screen Capture
Adversaries may attempt to take screen captures of the desktop to gather information over the course of an operation. Screen capturing functionality may be included as a feature of a remote access tool used in post-compromise operations. Taking a screenshot is also typically possible through native utilities or API calls, such as <code>CopyFromScreen</code>, <code>xwd</code>, or <code>screencapture</code>.(Citation: CopyFromScreen .NET)(Citation: Antiquated Mac Malware)
TA0009
Linked Daily items
0 hits
No Daily items mapped yet.
Linked Incidents
0 hits
No incidents mapped yet.
Predicted CVE associations
0 items
No mappings yet for this technique.
These relationships come from the current triage artifact and are not official MITRE mappings.