Re: keyboard logging questions

From: sarnoldat_private
Date: Thu Jun 28 2001 - 09:20:04 PDT

  • Next message: mpepe CM: "Re: Where are greater risks?"

    On Tue, Jun 26, 2001 at 04:48:02PM -0700, Booke, Raymond wrote:
    > I am looking for information on keyboard loggers.  I would like to use such
    > a tool for evidence gathering, but the tools I have seen don't meet the
    > specs that would be required.  The tool would have to be:
    > 
    > Completely hidden,
    > Remotely installable
    > Not going to trigger virus scanner
    
    Hmm. It sounds to me that you want a software device. Finding something
    to match all these is going to be very difficult. Remotely installable
    is always very difficult under windows. (I am guessing you want windows
    by the credentials in your .sig.) Virus scanners can be made to trigger
    on anything, so something not in a virus scanner this month may be next
    month.
    
    Completely hidden is right out. The logger has to store the logs
    someplace, right? That doesn't sound hidden to me.
    
    You may want to consider keyghost. I've never used one. In fact, I'm not
    too sure about the "completely hidden" bit either -- I've seen some
    photos where it was impossible to tell the thing was in use, and others
    where a massive box dangles off the keyboard cable. It wouldn't hurt to
    ask them how big it is. And it isn't remotely installable, because
    someone actually has to monkey with the keyboard cable.
    
    But it might be what you want.
    
    Cheers
    
    -----------------------------------------------------------------
    
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management 
    and tracking system please see:
    
    http://aris.securityfocus.com
    



    This archive was generated by hypermail 2b30 : Thu Jun 28 2001 - 17:01:05 PDT