| splunk |
Linux Clipboard Data Copy |
production |
2026-10-02 |
| splunk |
Linux Auditd Clipboard Data Copy |
production |
2026-10-02 |
| elastic |
Linux Clipboard Activity Detected |
production |
2026-09-18 |
| elastic |
PowerShell Suspicious Script with Clipboard Retrieval Capabilities |
production |
2026-09-18 |
| elastic |
Suspicious pbpaste High Volume Activity |
production |
2026-09-18 |
| elastic |
Pbpaste Execution via Unusual Parent Process |
production |
2026-09-18 |
| splunk |
Windows ClipBoard Data via Get-ClipBoard |
production |
2026-06-29 |
| sigma |
Clipboard Access Via OSAScript |
test |
2026-05-22 |
| splunk |
Windows Post Exploitation Risk Behavior |
production |
2026-05-13 |
| sigma |
Clipboard Data Collection Via Pbpaste |
test |
2024-07-30 |
| sigma |
Data Copied To Clipboard Via Clip.EXE |
test |
2023-02-21 |
| sigma |
PowerShell Get Clipboard |
test |
2023-01-04 |
| sigma |
PowerShell Get-Clipboard Cmdlet Via CLI |
test |
2022-12-25 |
| sigma |
Clipboard Collection with Xclip Tool - Auditd |
test |
2022-11-26 |
| sigma |
Clipboard Collection of Image Data with Xclip Tool |
test |
2022-10-09 |
| sigma |
Clipboard Collection with Xclip Tool |
test |
2022-09-15 |