Skip to content

Commit bebcadd

Browse files
authored
Update clipboard-capture.md
Add note about Hyper-V
1 parent 16f551a commit bebcadd

1 file changed

Lines changed: 2 additions & 0 deletions

File tree

chapters/clipboard-capture.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -79,4 +79,6 @@ Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
7979
</Event>
8080
```
8181

82+
In Hyper-V environments where Sysmon is configured for this event type and capturing for RDP connections, will also capture when the window for the console is selected from Hyper-V Manager given it uses RDP for displaying the UI of the VM. Because of this text in the clipboard can be captured by accident exposing its contents to logs.
83+
8284

0 commit comments

Comments
 (0)