AmnesiaStealer continuous browser screenshot surveillance log output
Detects continuous low-frame-rate screenshot capture activity consistent with AmnesiaStealer's remote visual surveillance of a victim's authenticated browser session during live operator control.
Microsoft Sentinel (KQL)

