GIAC
GREM · Question #160
Which dynamic observation MOST reliably confirms keylogging behavior?
The correct answer is B. Hooks on window message events. See the full explanation below for the reasoning.
Question
Which dynamic observation MOST reliably confirms keylogging behavior?
Options
- AUse of VirtualAlloc
- BHooks on window message events
- CHigh entropy in memory
- DDNS queries
How the community answered
(27 responses)- A7% (2)
- B81% (22)
- C4% (1)
- D7% (2)
Community Discussion
No community discussion yet for this question.