NSPasteboard API clipboard access by non-clipboard-manager process
Detects processes attempting to interact with the macOS NSPasteboard (clipboard) that are not typically associated with standard clipboard utility operations like Maccy, pbcopy, or pbpaste. This may indicate unauthorized data collection or exfiltration of sensitive information copied to the system clipboard.
Microsoft Sentinel (KQL)
