Clipboard Access Via OSAScript

SigmaHQ Detections@sigmaHQ

•updated Jun 11, 2026•0•0•2

Detects access to clipboard content via osascript, which may be used for data collection but also occurs in legitimate clipboard utilities and automation scripts