From 108877e236031ffccf445be255cd53411b36c75e Mon Sep 17 00:00:00 2001 From: Carlos Perez Date: Fri, 9 Oct 2020 13:06:19 -0400 Subject: [PATCH] Update what-is-sysmon.md Added event for clipboard capture. --- what-is-sysmon.md | 1 + 1 file changed, 1 insertion(+) diff --git a/what-is-sysmon.md b/what-is-sysmon.md index 8b19031..d6f70a7 100644 --- a/what-is-sysmon.md +++ b/what-is-sysmon.md @@ -35,4 +35,5 @@ The table below shows the event types and event ID for each. |WMI Consumer to Filter|21 |DNS Query|22 |File Delete|23 +|Clipboard Capture|24 |Error|255