DET0668 Detection of Screen Capture
| Item | Value |
|---|---|
| ID | DET0668 |
| Version | 1.0 |
| Created | 21 October 2025 |
| Last Modified | 21 October 2025 |
Technique Detected: T1513 (Screen Capture)
Analytics
Android
AN1764
Application vetting services can look for the use of the Android MediaProjectionManager class, applying extra scrutiny to applications that use the class.
The user can view a list of apps with accessibility service privileges in the device settings.
Log Sources
| Data Component | Name | Channel |
|---|---|---|
| API Calls (DC0112) | Application Vetting | None |
| System Settings (DC0118) | User Interface | None |
Mutable Elements
| Field | Description |
|---|---|