Rule Info
Name
Clipboard Data Collection Via OSAScript
Author
Sohan G (D4rkCiph3r)
Description
Detects possible collection of data from the clipboard via execution of the osascript binary
Reference
Date
2023-01-31 00:00:00
Modified
None
Id
7794fa3c-edea-4cff-bec7-267dd4770fd7
Tags
attack.collection attack.execution attack.t1115 attack.t1059.002 DEMO
Type
Community Rule
Link to Public Repo
Scan your endpoints, forensic images or collected files with our portable scanner THOR