Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
ATT&CK technique

T1056.001

Keylogging

CollectionCredential Access 4 detections found
View on MITRE ATT&CK →

Detection rules

Source Rule Status Updated
elastic PowerShell Keylogging Script production 2026-09-18
sigma Potential Keylogger Activity test 2023-01-04
sigma Linux Keylogging with Pam.d test 2022-12-18
sigma Powershell Keylogging test 2022-07-11