Audio Capture via PowerShell (932fb0d8-692b-4b0f-a26e-5643a50fe7d6)
Detects audio capture via PowerShell Cmdlet.
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Audio Capture via PowerShell (932fb0d8-692b-4b0f-a26e-5643a50fe7d6) | Sigma-Rules | Audio Capture - T1123 (1035cdf2-3e5f-446f-a7a7-e8f6d7925967) | Attack Pattern | 1 |