Intel471 Info Stealer Screenshot Path

Path to the desktop screenshot captured by the info stealer on the infected machine.

Intel471 Feed shortText

Details

IDindicator-intel471infostealerscreenshotpath
CLI Nameintel471infostealerscreenshotpath
TypeshortText
From Version5.5.0
RequiredNo
Read OnlyNo
SearchableYes
Case InsensitiveYes
Expiration (hours)72

Associated Indicator Types

Source

indicator-Intel471InfoStealerScreenshotPath.json
Download History Raw 
{
	"id": "indicator-intel471infostealerscreenshotpath",
	"version": -1,
	"modified": "2026-07-14T13:52:15.792171106Z",
	"itemVersion": "",
	"toServerVersion": "",
	"name": "Intel471 Info Stealer Screenshot Path",
	"ownerOnly": false,
	"placeholder": "",
	"description": "Path to the desktop screenshot captured by the info stealer on the infected machine.",
	"cliName": "intel471infostealerscreenshotpath",
	"type": "shortText",
	"closeForm": false,
	"editForm": true,
	"required": false,
	"script": "",
	"fieldCalcScript": "",
	"neverSetAsRequired": false,
	"isReadOnly": false,
	"selectValues": null,
	"validationRegex": "",
	"useAsKpi": false,
	"locked": false,
	"system": false,
	"content": false,
	"group": 2,
	"hidden": false,
	"openEnded": false,
	"associatedTypes": [
		"Email",
		"Account"
	],
	"systemAssociatedTypes": null,
	"associatedToAll": false,
	"unmapped": false,
	"unsearchable": false,
	"caseInsensitive": true,
	"columns": null,
	"defaultRows": null,
	"sla": 0,
	"threshold": 72,
	"breachScript": "",
	"fromVersion": "5.5.0"
}