T1123 Audio Capture
An adversary can leverage a computer's peripheral devices (e.g., microphones and webcams) or applications (e.g., voice and video call services) to capture audio recordings for the purpose of listening into sensitive conversations to gather information. MITRE ATT&CK
2 Sigma rules T1123 on attack.mitre.org
Sigma rules tagged with it
mediumAudio Capture via PowerShellE.M. Anhaus (originally from Atomic Blue Detections, Endgame), oscd.community, Nasreddine Bencherchali (Nextron Systems) · Windows
mediumAudio Capture via SoundRecorderE.M. Anhaus (originally from Atomic Blue Detections, Endgame), oscd.community · Windows