ATT&CK technique
View on MITRE ATT&CK →
T1123
Audio Capture
Collection
11 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| elastic | PowerShell Suspicious Script with Audio Capture Capabilities | production | 2026-09-18 |
| elastic | Linux Audio Recording Activity Detected | production | 2026-09-18 |
| splunk | Zoom Rare Audio Devices | experimental | 2026-05-13 |
| splunk | Zoom Rare Video Devices | experimental | 2026-05-13 |
| splunk | Zoom Rare Input Devices | experimental | 2026-05-13 |
| sigma | Audio Capture | test | 2025-12-05 |
| sigma | OpenCanary - SIP Request | test | 2024-03-08 |
| sigma | Audio Capture via PowerShell | test | 2023-04-06 |
| sigma | Suspicious Camera and Microphone Access | test | 2022-10-09 |
| sigma | Audio Capture via SoundRecorder | test | 2021-11-27 |
| sigma | Processes Accessing the Microphone and Webcam | test | 2021-11-27 |