PT0-001 · Question #102
Given the following script: Which of the following BEST describes the purpose of this script?
The correct answer is C. Keystroke monitoring. The script captures and records keystrokes entered by a user, identifying it as a keystroke monitoring tool.
Question
Given the following script:
Which of the following BEST describes the purpose of this script?
Exhibit
Options
- ALog collection
- BEvent logging
- CKeystroke monitoring
- DDebug message collection
How the community answered
(21 responses)- A5% (1)
- B10% (2)
- C81% (17)
- D5% (1)
Why each option
The script captures and records keystrokes entered by a user, identifying it as a keystroke monitoring tool.
Log collection retrieves and aggregates existing system or application log files rather than capturing live user keyboard input.
Event logging records system-level events through mechanisms like Windows Event Log and does not capture individual keystrokes typed by users.
Keystroke monitoring scripts intercept and record user input at the keyboard level, capturing typed characters such as passwords and commands in real time. This class of tool, commonly called a keylogger, hooks into OS input-handling mechanisms to silently log and store or exfiltrate keystrokes without user awareness.
Debug message collection gathers diagnostic output from application processes, not real-time user input from the keyboard.
Concept tested: Keylogger script identification and purpose
Source: https://attack.mitre.org/techniques/T1056/001/
Topics
Community Discussion
No community discussion yet for this question.
