SIGHTGRAB Screenshot Utility Writing Sequential JPGs to Public\Videos

Ibrahim Saud@tektrix

•updated Jul 2, 2026•1•0•5

Detects a suspicious volume of image file creation events (more than 3) within the 'C:\Users\Public\Videos\' directory, matching a pattern commonly used for automated screen capture tools.