Screen Capture with Xwd (e2f17c5d-b02a-442b-9052-6eb89c9fec9c)
Detects adversary creating screen capture of a full with xwd. Highly recommended using rule on servers, due high usage of screenshot utilities on user workstations
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Screen Capture - T1113 (0259baeb-9f63-4c69-bf10-eb038c390688) | Attack Pattern | Screen Capture with Xwd (e2f17c5d-b02a-442b-9052-6eb89c9fec9c) | Sigma-Rules | 1 |