Sysmon 12.0 — EventID 24 | By Olaf Hartong

Sysmon 12.0 — EventID 24 Sysmon 12 is out, with a new event ID: number 24. A very useful new feature, clipboard monitoring. Now there is an obvious great use for this in forensic investigations during and after an incident. However, there are additional ways to use this to also trigger....