All Detections

Screen Capture Activity Via Psr.EXE

Yamato Security Hayabusa@YamatoSecurityHayabusa
updated Jun 24, 202509

Detects execution of Windows Problem Steps Recorder (psr.exe), a utility used to record the user screen and clicks.

Sigma