A systems administrator found a suspicious file in the root of the file system. The file contains URLs, usernames, passwords, and text from other documents being edited on the system. Which of the…

A keylogger is designed to silently record all keyboard input and clipboard activity, which explains the presence of URLs, usernames, passwords, and text from documents being edited. The captured data is typically written to a local log file that the attacker later exfiltrates, which matches the suspicious file found in the root of the filesystem.

A rootkit is designed to hide malicious activity and maintain privileged access on a system, not to capture and log user input or document content.

A bot connects an infected system to a command-and-control network to perform automated tasks such as DDoS attacks or spam distribution, but does not specifically capture and store credentials and typed text in a local file.

A Remote Access Trojan (RAT) provides an attacker with remote control over a system, but its primary function is remote access rather than locally logging keystrokes and document content into a file.