Building a Clipboard History Viewer Using PowerShell
Tags
attack-pattern: | Data Powershell - T1059.001 Powershell - T1086 |
Common Information
Type | Value |
---|---|
UUID | 4e01ec12-3c7e-44d7-a741-996e384051f0 |
Fingerprint | b44980c70833d8f4 |
Analysis status | DONE |
Considered CTI value | 0 |
Text language | |
Published | July 24, 2014, midnight |
Added to db | Jan. 18, 2023, 9:57 p.m. |
Last updated | Nov. 15, 2024, 9:31 p.m. |
Headline | UNKNOWN |
Title | Building a Clipboard History Viewer Using PowerShell |
Detected Hints/Tags/Attributes | 20/1/15 |
Source URLs
URL Provider
Attributes
Details | Type | #Events | CTI | Value |
---|---|---|---|---|
Details | Domain | 73 | schemas.microsoft.com |
|
Details | Domain | 1 | runspacehash.host |
|
Details | Domain | 1 | runspacehash.runspace.open |
|
Details | Domain | 61 | system.windows |
|
Details | Domain | 8 | system.windows.data |
|
Details | Domain | 21 | gallery.technet.microsoft.com |
|
Details | File | 19 | system.xml |
|
Details | File | 6 | collections.obj |
|
Details | File | 15 | windows.dat |
|
Details | File | 13 | _.key |
|
Details | File | 1 | input.key |
|
Details | File | 1 | clipboardhistoryviewer.ps1 |
|
Details | Url | 5 | http://schemas.microsoft.com/winfx/2006/xaml/presentation |
|
Details | Url | 5 | http://schemas.microsoft.com/winfx/2006/xaml |
|
Details | Url | 1 | http://gallery.technet.microsoft.com/scriptcenter/powershell-clipboard-c414ec78 |