CmdID / Techniques
Adversaries may use methods of capturing user input to obtain credentials or collect information. MITRE ATT&CK
T1056 on attack.mitre.org