Windows PowerShell Password Input Window

Lucas Pinho@lucaslapinho

•updated Aug 17, 2026•2•0•6

Detects a user-session window titled 'Password Input' associated with PowerShell, PowerShell Core, or PowerShell ISE processes. This technique may be used for GUI-based credential capture or social engineering.