Data Copied To Clipboard Via Clip.EXE — Detection Rule

Detects the execution of clip.exe in order to copy data to the clipboard. Adversaries may collect data stored in the clipboard from users copying information within or between applications.

Read the full analysis on IntelFusions