Atlas RAT Webcam and Screen Capture via DirectShow or Media Foundation DLL Load by Non-Media Process
Detects processes attempting to load multimedia DLLs or access video capture devices that are not associated with authorized communication, media, or browser applications. This logic identifies potentially malicious attempts to capture video feeds from local cameras.
Splunk (SPL)
