Viewing recorded data by Hardware keylogger

Author: Jack Conner

Viewing recorded dataOnce screenshots have been recorded to the internal flash drive, they may be viewed on any computer, laptop, or TV with USB Mass Storage support. The procedure is very similar to restoring images from a digital camera.

Connect the USB cable of the VideoGhost Keylogger to a free USB port, then press and hold the pushbutton. After a few seconds, the hardware video-logger will automatically get detected as a Mass Storage Device. The operating system will use the standard built-in mass storage driver (MS Windows in the following examples).

Note: During the first switch to flash drive mode, the operating system can ask for drivers. In such case choose automatic driver installation (usually default option).

The flash drive will contain the captured screenshots as JPEG files, grouped in folders named 001, 002, etc. Depending on the device configuration, the images may have burned-in timeand date-stamps. Use any image-viewing software to browse the JPEG files, such as the default Windows Photo Viewer

Switching back to record mode can be achieved by a safe software removal of the flash disk. Use the systems standard disk removal procedure. For MS Windows, left-click on the Safe Removal icon in the system tray and select the appropriate drive. Then reconnect the VideoGhost to the USB port.

To get the most out of the VideoGhost, install the supplied application KL Tools. Go to section Using KL Tools to find out more.

Configuration optionsThe VideoGhost may be configured through the file CONFIG.TXT, placed in the flash drive root folder. Use any text editor to prepare such a configuration file, containing the following text:Interval=300Resize=50Timestamping=Image

Copy this file to the root folder in flash drive mode. The new configuration will be loaded on next power-up

The following list presents the most common configuration options. All variable and value strings are case insensitive.

Interval sets number of seconds between successive screenshots. Please note that compressing and saving an image takes several seconds (depending on the image size and quality), so this may become the limiting factor for low values of Interval. Default value is 300.

Resize sets the resizing factor for storing screenshots. Allowed values are No (no resizing), Auto (automatic resizing factor based on image size), 75 (75%), 67 (67%), 50 (50%), 33 (33%), and 25 (25%). Default value is No.

Timestamping configures the built-in time- and date-stamping module. Allowed values are Yes (timestamping active, but limited to updating the modification time and date of JPEG files), Image (timestamps burned into JPEG image content), and No (timestamping disabled). Default is Image.

Quality sets the quality factor for JPEG compression. Allowed values are from 1 (lowest quality, smallest file size) to 10 (highest quality, largest file size). Please note that setting a high quality value will result in longer compression times and increased disk space usage. Default value is 7.

DisableLogging allows to disable screenshot logging. Allowed values are Yes (logging disabled) and No (logging enabled). Default value is No.

Encryption enables flash disk encrypting. Encryption will ensure full confidentiality of the stored data, even if the device is physically tampered with. Allowed values are Yes (encryption enabled) and No (encryption disabled). Default is No.

Important: toggling the encryption setting will format the entire flash disk. All data will be lost, including the configuration file!

An example configuration file contents is shown below:Interval=200Resize=25Timestamping=YesQuality=5

For more please visit: https://www.keelog.com/power-supply/