ChonkyChicken Chained Monitor Enumeration → Screen Capture Start (C2 Session)

Duo Tech@duotech

•updated Jul 24, 2026•0•0•2

Detects ChonkyChicken's monitor_list enumeration chained with a screen_start command in the same C2 session.