==================================================

CREATED: OSX-STEALTH-SCREENCAPTURE (#1936)

Description

This detector identifies the use of screencapture -x to take a screenshot without the user knowing. By default screencapture makes a sound, specifying -x disables the sound. 

ATT&CK Technique T1113

Did this answer your question?