Skip to content

Hide Navigation Hide TOC

Data Copied To Clipboard Via Clip.EXE (ddeff553-5233-4ae9-bbab-d64d2bd634be)

Detects the execution of clip.exe in order to copy data to the clipboard. Adversaries may collect data stored in the clipboard from users copying information within or between applications.

Cluster A Galaxy A Cluster B Galaxy B Level
Clipboard Data - T1115 (30973a08-aed9-4edf-8604-9084ce1b5c4f) Attack Pattern Data Copied To Clipboard Via Clip.EXE (ddeff553-5233-4ae9-bbab-d64d2bd634be) Sigma-Rules 1