Screen Capture Activity Via Psr.EXE — Detection Rule
Detects execution of Windows Problem Steps Recorder (psr.exe), a utility used to record the user screen and clicks.
Detects execution of Windows Problem Steps Recorder (psr.exe), a utility used to record the user screen and clicks.