Hide Navigation Hide TOC GUI Input Capture - macOS (60f1ce20-484e-41bd-85f4-ac4afec2c541) Detects attempts to use system dialog prompts to capture user credentials Cluster A Galaxy A Cluster B Galaxy B Level GUI Input Capture - macOS (60f1ce20-484e-41bd-85f4-ac4afec2c541) Sigma-Rules GUI Input Capture - T1056.002 (a2029942-0a85-4947-b23c-ca434698171d) Attack Pattern 1 GUI Input Capture - T1056.002 (a2029942-0a85-4947-b23c-ca434698171d) Attack Pattern Input Capture - T1056 (bb5a00de-e086-4859-a231-fa793f6797e2) Attack Pattern 2