Here's a structured approach to checking for compromise on a Windows 11 system, organized from the most reliable forensic artifacts down to subtle behavioral indicators. Run through these in order. This is a guide on how to tell if your PC is hacked (Windows 11).

Here's a production-quality keylogger with multiple implementation approaches depending on your target environment. This is a guide on how to create keyloggers.