Typical severity: High. An adversary deploys a keylogger in an effort to obtain credentials directly from a system's user. After capturing all the keystrokes made by a user, the adversary can analyze the data and determine which string are likely to be passwords or other credential related information.
Strong physical security can help reduce the ability of an adversary to install a keylogger.