MITRE ATT&CK technique

Video Capture detection rulesT1125

Video Capture (T1125) is a MITRE ATT&CK technique in the Collection tactic. This page lists the 1 community-maintained Sigma detection rule in the library mapped to T1125 and its sub-techniques. Each rule includes its detection logic, log source, false positives and original YAML. These rules mainly target windows.

T1125 on attack.mitre.org1 rule

Tactic

Collection

Suspicious Camera and Microphone Access
high
Detects Processes accessing the camera and microphone from suspicious folder
windows · registry_event

Top products

Tactic

Suspicious Camera and Microphone Access