Screen Capture T1113
Adversaries may attempt to take screen captures of the desktop to gather information over the course of an operation. Screen capturing functionality may be included as a feature of a remote access tool used in post-compromise operations. Taking a screenshot is also typically possible through…
- Tactics
- Collection
- Actors using it
- 19
- Sub-techniques
- 0
Threat actors
- KimsukyNorth Korea · Black Banshee, Velvet Chollima, Emerald Sleet · 87 techniques
- APT28Russia · IRON TWILIGHT, SNAKEMACKEREL, Swallowtail · 73 techniques
- Volt TyphoonChina · BRONZE SILHOUETTE, Vanguard Panda, DEV-0391 · 58 techniques
- OilRigIran · COBALT GYPSY, IRN2, APT34 · 58 techniques
- Magic HoundIran · TA453, COBALT ILLUSION, Charming Kitten · 58 techniques
- Gamaredon GroupRussia · IRON TILDEN, Primitive Bear, ACTINIUM · 55 techniques
- VOID MANTICOREIran · COBALT MYSTIQUE, Handala Hack, Homeland Justice · 51 techniques
- FIN7GOLD NIAGARA, ITG14, Carbon Spider · 50 techniques
- DragonflyRussia · TEMP.Isotope, DYMALLOY, Berserk Bear · 48 techniques
- MuddyWaterIran · Earth Vetala, MERCURY, Static Kitten · 48 techniques
- APT39Iran · ITG07, Chafer, Remix Kitten · 39 techniques
- BRONZE BUTLERChina · REDBALDKNIGHT, Tick · 33 techniques
- APT42Iran · 29 techniques
- SilenceWhisper Spider · 25 techniques
- Winter VivernTA473, UAC-0114 · 22 techniques
- Dark CaracalLebanon · 11 techniques
- GOLD SOUTHFIELDPinchy Spider · 9 techniques
- MoustachedBouncer7 techniques
- Group5Iran · 4 techniques