H3XAOperational intelligence
Live analytical pictureEvidence before assessment
TypeMitigation
External ID—
First seen2026-08-14
Last seen2026-08-14

Confidence

—

Block .scr files from being executed from non-standard locations. Set Group Policy to force users to have a dedicated screensaver where local changes should not override the settings to prevent changes. Use Group Policy to disable screensavers if they are unnecessary. (Citation: TechNet Screensaver GP)

0 recorded

Relationships

No relationships recorded.

2 external

References

mitre-attack
T1180
open
TechNet Screensaver GP
https://technet.microsoft.com/library/cc938799.aspx
open