Vault 7: Projects
This publication series is about specific projects related to the Vault 7 main publication.
SECRET//NOFORN
[UNCLASSIFIED]
[UNCLASSIFIED]
(U) This screenshot shows an example of the “Camera & Microphone tab”. In this instance,
there were two camera devices connected to the target system. The camera with device name
“\Device\000000f8” is currently selected, and shows that a single process was using the device.
The “Files” table shows that one file was being written to at the time Dumbo suspended the
process. If multiple processes were using the camera device, all of the files with write-access
found across the multitude of processes would be shown in the table.
(S) The last write time is shown to be a recent time, and is likely a suspect file that should be
corrupted or deleted. The “.mp4” file extension is a known video format, and is another clue this
file should not be left on disk.
(U) The screenshot also shows that all microphones are currently muted.
SECRET//NOFORN
11
Dumbo-v3_0-User_Guide.pdf