Powershell Keylogging (34f90d3c-c297-49e9-b26d-911b05a4866c)

Adversaries may log user keystrokes to intercept credentials as the user types them.

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Keylogging - T1056.001 (09a60ea3-a8d1-4ae5-976e-5783248b72a4)	Attack Pattern	Powershell Keylogging (34f90d3c-c297-49e9-b26d-911b05a4866c)	Sigma-Rules	1
Input Capture - T1056 (bb5a00de-e086-4859-a231-fa793f6797e2)	Attack Pattern	Keylogging - T1056.001 (09a60ea3-a8d1-4ae5-976e-5783248b72a4)	Attack Pattern	2