BeepRAT Webcam Capture via avicap32.dll Loaded by HFY.exe (DcRAT)
Detects the loading of the 'avicap32.dll' library or references to it in command lines by specific processes (hfy.exe, tcc.exe) associated with the BeepRAT malware family, indicating potential unauthorized webcam access.
Splunk (SPL)
