TACTIC: COLLECTION

Screen Capture (T1113): real cases

MITRE Definition ↗
Adversaries take screenshots of victim desktop sessions to collect sensitive information.

Key Facts

Technique ID
T1113
Collection
Mapped Cases
1
Primary sources
Related Laws
0
Criminal statutes
  • ATT&CK Technique Identifier: T1113.
  • Tactical Phase: Collection.
  • Substantiated in 1 primary court prosecution cases.
  • Every associated case includes verbatim evidentiary excerpts from indictments or sworn affidavits.

Verified Evidentiary Case Records

Primary Source Evidence Excerpt: Indictment ¶ 25, Page 14
"Defendants configured video screen-recording modules to capture point-of-sale terminal transactions in real time."
U.S. District Court for the Western District of Washington View full case dossier →