Powershell Keylogging — Detection Rule

Adversaries may log user keystrokes to intercept credentials as the user types them.

Read the full analysis on IntelFusions