domains / families / security / offensive-keylogger-arch

offensive-keylogger-arch

separate

Designs low-level keylogger architecture including kernel driver hooks, ETW-based input capture, and stealth techniques. Used for understanding input capture mechanisms, EDR evasion research, or malware architecture analysis.

When to use

• kernel driver hooks
• WH_KEYBOARD_LL
• SetWindowsHookEx
• ETW-based input capture
• user-mode vs kernel-mode approaches
• stealth techniques
• data exfiltration
• malware architecture analysis

Skill page

Source