Skip to content
Threat Feed
Subscribe

Tag

Endpoint-Monitoring

1 brief RSS
medium advisory

Windows Screen Capture via PowerShell CopyFromScreen

Adversaries use the .NET CopyFromScreen method within PowerShell scripts to capture desktop screenshots for information gathering during post-compromise operations.

collection reconnaissance powershell endpoint-monitoring
1r 1t