TAG-195 ChonkyChicken Keylogging Commands (keylog_start/keylog_stop) with Active Window Title Capture

Duo Tech@duotech

•updated Jul 24, 2026•0•0•6

Detects the keylog_start/keylog_stop C2 command schema with active-window-title capture used by ChonkyChicken's keylogging capability.