PowerShell Get-Clipboard Cmdlet Via CLI

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•15

Detects the execution of the 'Get-Clipboard' PowerShell cmdlet via the command line interface. This cmdlet is used to retrieve the current content of the clipboard, which could be leveraged by adversaries for data collection.