Loading ATT&CK
Detections can measure how the public catalogue is used — which detections people look for, and which pages bring them here. It sets a cookie that recognises this browser for 180 days. It is never linked to an account and never follows you to other sites. Privacy notice
Every one carries the source it came from and the licence it was published under.
| Detection | Severity |
|---|---|
| Linux Clipboard Data Copy | Informational |
| Linux Auditd Clipboard Data Copy | Informational |
| PowerShell Suspicious Script with Clipboard Retrieval Capabilities | Medium |
| Suspicious pbpaste High Volume Activity | Medium |
| Pbpaste Execution via Unusual Parent Process | High |
| Linux Clipboard Activity Detected | Low |
| Powershell Empire Cmdlets Executed in Command Line | Medium |
| Windows Post Exploitation Risk Behavior | Informational |
| Windows ClipBoard Data via Get-ClipBoard | Informational |
| PowerShell Get-Clipboard Cmdlet Via CLI | Medium |
| Data Copied To Clipboard Via Clip.EXE | Low |
| PowerShell Get Clipboard | Medium |
| Clipboard Access Via OSAScript | Medium |
| Clipboard Collection with Xclip Tool | Low |
| Clipboard Collection of Image Data with Xclip Tool | Low |
| Clipboard Collection with Xclip Tool - Auditd | Low |
Showing 16 of 16