As cited
Copy frozen at (site build).
Protecting your devices from information theft
No summary had been written when this copy was frozen.
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Protecting your devices from information theft
Elastic Defend, starting with version 8.12, added detection capabilities for keyloggers and malware with keylogging functionality on Windows by monitoring calls to representative Windows APIs such as GetAsyncKeyState, SetWindowsHookEx, and RegisterRawInputDevices. The article provides technical background on four types of software keyloggers (polling-based, hooking-based, raw input model, and DirectInput) and describes new behavioral detection rules designed to identify suspicious keystroke capture activity without relying on signatures.
Why it matters: Security teams deploying Elastic Defend need to understand the new keylogger detection rules in versions 8.12 and later to effectively monitor for information-stealing malware, remote access trojans, and banking malware that capture credentials and sensitive data through keyboard monitoring.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Protecting your devices from information theft
Elastic Defend, starting with version 8.12, added detection capabilities for keyloggers and malware with keylogging functionality on Windows by monitoring calls to representative Windows APIs such as GetAsyncKeyState, SetWindowsHookEx, and RegisterRawInputDevices. The article provides technical background on four types of software keyloggers (polling-based, hooking-based, raw input model, and DirectInput) and describes new behavioral detection rules designed to identify suspicious keystroke capture activity without relying on signatures.
Why it matters: Security teams deploying Elastic Defend need to understand the new keylogger detection rules in versions 8.12 and later to effectively monitor for information-stealing malware, remote access trojans, and banking malware that capture credentials and sensitive data through keyboard monitoring.
- Source published
- First seen by Cybersecurity Tracker