{
  "node_id": "mitre-attack-mobile-t1512-video-capture",
  "title": "MITRE ATT&CK Mobile T1512: Video Capture (Mobile Tactic TA0035 - Collection)",
  "domain": "Cybersecurity",
  "version": "1.0.0",
  "last_updated": "2026-05-25",
  "bluf": "MITRE ATT&CK T1512 (Video Capture) is an ATT&CK for Mobile Collection technique. An adversary can leverage a device's cameras to gather information by capturing video recordings. Images may also be captured, potentially in specified intervals, in lieu of video files. Malware or scripts may interact with the device cameras through an available API provided by the operating system. Video or image files may be written to disk and exfiltrated later. This technique differs from Screen Capture due to use of the device's cameras for video recording rather than capturing the victim's screen. Affected platforms: Android, iOS. MITRE-documented mitigations include M1006 Use Recent OS Version. Mobile controls map to NIST SP 800-124 Rev 2 and OWASP MASVS.",
  "paywall": {
    "status": "LOCKED",
    "unlock_cost_usd": "0.01",
    "skyfire_id": "41779894-ece2-4163-9761-b3b1b76e19b0"
  },
  "crosswalks": {
    "_available_keys": [
      "nist_framework",
      "iso_standard",
      "industry_mapping",
      "mitre_d3fend"
    ],
    "_note": "Full crosswalk values included in vault response"
  },
  "dependencies": [
    "nist-cybersecurity-framework-2-0",
    "iso-27001-2022",
    "nist-sp-800-53-r5",
    "cis-controls-v8",
    "mitre-attack-framework-v14"
  ],
  "primary_citations_count": 6
}