feat: log keystrokes via direct input

Author: zeze-zeze

collection/keylog/log-keystrokes-via-direct-input.yml

@@ -0,0 +1,15 @@
+rule:
+  meta:
+    name: log keystrokes via direct input
+    namespace: collection/keylog
+    authors:
+      - @zeze-zeze
+    scopes:
+      static: function
+      dynamic: call
+    att&ck:
+      - Collection::Input Capture::Keylogging [T1056.001]
+    examples:
+      - 0db010298586f17ee7e46f390d5724be.exe_
+  features:
+    - api: dinput8.DirectInput8Create