Files
Ares-mythic/documentation-payload/ares/commands/screenshot_inject.md
Aryma 03d283cf49 refactor(payload): rename apollo to ares and update documentation
This commit renames the Apollo payload type to Ares, moving all associated files and updating documentation accordingly. The change includes:
- Renaming directories from `apollo` to `ares`
- Updating documentation image references
- Maintaining the same code functionality while changing the payload name
- Adding new Ares-specific documentation files
- Removing old Apollo documentation files

The rename is done to reflect the new payload name while preserving all existing functionality.
2026-04-14 14:02:44 +07:00

45 lines
822 B
Markdown

+++
title = "screenshot"
chapter = false
weight = 103
hidden = false
+++
{{% notice info %}}
Artifacts Generated: Process Inject
{{% /notice %}}
## Summary
Take a screenshot of the desktop session associated with the target process.
## Arguments
### PID
The process to inject the screenshot assembly into.
### Count
How many screenshots to take. Default: 1
### Interval
Amount of time (in seconds) to wait between screenshots being taken. Default: 0
## Usage
```
screenshot_inject -PID [pid] -Count [count] -Interval [interval]
```
## MITRE ATT&CK Mapping
- T1113
## Special Thanks
Reznok wrote the Apollo 1.X version of this module. You can find him at the following:
Social | Handle
-------|-------
Github|https://github.com/reznok
Twitter|[@reznok](https://twitter.com/rezn0k)
BloodHoundGang Slack|@reznok