Overview

This cmdlet turns on keystroke logging. The keylogger monitors Windows UI messages and records them to an internal buffer within the SpecterInsight implant. The buffer can be dumped by using the Get-CapturedKeys cmdlet.

Employment Considerations

This keylogger only works when run from the explorer.exe application. It cannot collect keystrokes when running as NT AUTHORITY\SYSTEM.

Dependencies

• Credentials