Data Path // Keystroke to Exfiltration
LANE 01 // CAPTURE & BUFFER LANE 02 // OBFUSCATION & PREP LANE 03 // EXFILTRATION & DECRYPTION RAW INPUT MAPPED APPEND BUFFER DUMP STEALTH PARAMS OBFUSCATED INJECT SCRIPT EXECUTE WATCHDOG SMTP EXFIL REVERSE DECRYPT KEYBOARD INPUT 01 // RAW INTERRUPT MODIFIER KEYS [SHIFT: OFF] HOOK CALLBACK 03 // WH_KEYBOARD_LL LOG BUFFER 04 // MEMORY CACHE CONSOLE HIDING 05 // WIN32 STEALTH BASE64 + SALTS 06 // OBFUSCATION TEMP PS SCRIPT 07 // DROPPED STAGER HIDDEN PS PROC 08 // BEACON EXEC SMTP SEND 09 // EXFILTRATION TIMEOUT WATCHER 10 // SELF-CLEANUP DECRYPTED MIRROR 11 // OPERATOR VIEW
LIVE EXFILTRATION STREAM ACTIVE // TUNNEL SECURE
[SYSTEM] Keylogger initialized. Monitoring WH_KEYBOARD_LL...
[SYSTEM] Event hook registered successfully in thread memory.
NODE INSPECTOR
Click any component node in the diagram above to inspect its real-time telemetry, underlying API calls, and defense evasion mechanics.