UNC1549 SIGHTGRAB screenshot staging in Public\Videos

Ibrahim Saud@tektrix

•updated Jul 2, 2026•0•0•1

Detects the creation of multiple sequential screenshot files (JPG or BMP) within the C:\Users\Public\Videos directory. This activity is consistent with the SIGHTGRAB tool utilized by UNC1549 for visual intelligence collection.