PowerShell Get-Clipboard Command Execution

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•19

This rule detects the use of the 'Get-Clipboard' command within PowerShell logs. This command allows an adversary to retrieve the current content of the system clipboard, which could contain sensitive information copied by a user.