Michael Haag
18fa8c1218
Per https://github.com/redcanaryco/atomic-red-team/issues/22, fixing payload link location.
14 lines
419 B
Markdown
14 lines
419 B
Markdown
# Input Capture
|
|
|
|
MITRE ATT&CK Technique: [T1056](https://attack.mitre.org/wiki/Technique/T1056)
|
|
|
|
## PowerShell
|
|
|
|
### Get-Keystrokes.ps1
|
|
|
|
[Payload](https://github.com/redcanaryco/atomic-red-team/blob/master/Windows/Payloads/Collection/Get-Keystrokes.ps1) provided by [PowerSploit](https://github.com/PowerShellMafia/PowerSploit/blob/master/Exfiltration/Get-Keystrokes.ps1)
|
|
|
|
Input:
|
|
|
|
Get-Keystrokes -LogPath C:\key.log
|