CmdID

CmdID / PowerShell / Cmdlets / Get

Get-Clipboard

Gets the current Windows clipboard entry. PowerShell reference

From the PowerShell reference 3 parameters Alias gcb 1 Sigma rule looks for it

Opens CmdID with your command, read as PowerShell. It is read in your browser and sent nowhere.

What it does

from the PowerShell reference, CC BY 4.0

Gets the current Windows clipboard entry. The Get-Clipboard cmdlet gets the current Windows clipboard entry. Multiple lines of text are returned as an array of strings similar to Get-Content.

Get-Clipboard [-Format <ClipboardFormat>] [-TextFormatType <TextDataFormat>] [-Raw] [<CommonParameters>]

Get the content of the clipboard

Set-Clipboard -Value 'hello world' Get-ClipboardIdentify

Trips 1 Sigma rule: mediumPowerShell Get-Clipboard Cmdlet Via CLI by Nasreddine Bencherchali (Nextron Systems)

Get the content of the clipboard in a specific format

Get-Clipboard -Format FileDropListIdentify

Trips 1 Sigma rule: mediumPowerShell Get-Clipboard Cmdlet Via CLI by Nasreddine Bencherchali (Nextron Systems)

Its page in the reference: Get-Clipboard.

Parameters

3 in the PowerShell reference
-FormatSpecifies the type, or format, of the clipboard. The acceptable values for this parameter are: - Text - FileDropList - Image - Audio
-RawGets the entire contents of the clipboard. Multiline text is returned as a single multiline string rather than an array of strings.
-TextFormatTypeSpecifies the text data format type of the clipboard. The acceptable values for this parameter are: - Text - UnicodeText - Rtf - Html - CommaSeparatedValue

What looks for it

Sigma process creation rules that name Get-Clipboard
mediumPowerShell Get-Clipboard Cmdlet Via CLINasreddine Bencherchali (Nextron Systems)