All Detections

System Drawing DLL Load

Yamato Security Hayabusa@YamatoSecurityHayabusa
updated Jun 24, 202505

Detects processes loading "System.Drawing.ni.dll". This could be an indicator of potential Screen Capture.

Sigma