Suspicious PowerShell Clipboard Module Usage
This rule looks for the usage of less common PowerShell modules which interface directly with the current user's clipboard. This could be an attempt to steal sensitive data or attempt to modify clipboard contents.
Microsoft Sentinel (KQL)
