ATT&CKProcedure examples

Procedure examples

Real-world descriptions of how a group, tool or campaign used a technique.

Technique: T1113×

151 examples

TechniqueUsed byProcedure example
T1113
Screen Capture
MalwareFlame

Flame can take regular screenshots when certain applications are open that are sent to the command and control server.

Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.