An electronic lock includes a latch assembly that includes a bolt that is movable between an extended position and a retracted position. The electronic lock includes a keypad for receiving a keypad input event. The electronic lock includes a processing unit being configured to control the movement of the bolt between the extended position and the retracted position responsive to receiving a valid keypad input event. The processing unit is configured to capture the keypad input event. Based at least in part on a characteristic of the keypad input event, the processing unit indicates if a tampering event exists. The characteristic includes at least one of an input location on the keypad, an input duration on the keypad, and an input timestamp.