BeepRAT Screen Capture and Video Recording Plugin Commands Detected
Detects command-line execution or file events indicative of BeepRAT C2 framework activity, specifically targeting screen capture and thumbnail streaming commands derived from DcRAT plugin behavior.
Microsoft Sentinel (KQL)

