macOS Infostealer Silent Screenshot Activity

Detects use of screencapture -x, which suppresses the camera shutter sound and has been observed in ClickFix-delivered malware.

Microsoft Sentinel (KQL)