[Dshield] good keystroke logger

Jay S. Kelley jkelley at fhcn.org
Wed Jan 14 17:37:32 GMT 2004

I would recommend a hardware keystroker that uses no software/resources.
Problem is that it will be visible if he/she looks behind the computer.
This is what our department has been using and is very effective logging
about 65,000 keystrokes.


Jay Kelley

-----Original Message-----
From: Johannes B. Ullrich [mailto:jullrich at sans.org] 
Sent: Wednesday, January 14, 2004 9:26 AM
To: list at dshield.org
Subject: [Dshield] good keystroke logger

I usually don't post anonymous requests like this. But I know
the poster and this is 'legit'.


I have a dilemma and I need some direction from the talented members of
the DShield security organization.  We have a fairly senior manager that
is being suspected of doing things not within the scope of the job, so
to speak.  The bosses have asked me to install a keystroke logger onto
this person's system, which I don't have an issue doing.  I don't know
what to install on it that won't be detected easily by Anti virus.  This
person is fairly savvy when it comes to their system so it has to be
very stealthy.  I will also use ethereal to trap packets for further
detail but this keystroke logger is a bit new to me.  Any suggestions?


CTO SANS Internet Storm Center               http://isc.sans.org
phone: (617) 837 2807                          jullrich at sans.org 

contact details: http://johannes.homepc.org/contact.htm

More information about the list mailing list