Skip to main content
The Clipboard monitoring parameter captures text data on Copy, Cut, and Paste operations performed on Client computers. Clipboard text appears in the Session Viewer alongside screen recordings, becomes searchable across sessions, and can drive alert rules - useful for catching credential exfiltration, intellectual-property copy-out, and document-content tampering.
Applies to: Windows Clients, macOS Clients. The parameter behaves identically across both platforms.

​
Where to find it

The Enable clipboard monitoring checkbox lives on the Editing Client / Editing Client Group page, on the Monitoring [Windows/macOS] tab, in the Monitoring Parameters section at the top.

​
What gets captured

When enabled, the Client logs text data on:
  • Cut operations - Ctrl+X, Shift+Del, or Cut from the context menu
  • Copy operations - Ctrl+C, Ctrl+Ins, or Copy from the context menu
  • Paste operations - Ctrl+V, Shift+Ins, or Paste from the context menu (Windows Clients only - macOS Clients capture Cut and Copy but not Paste)
Only text data is captured. Image, file, or rich-object clipboard contents aren’t recorded.

​
Where to view captured clipboard text

See Viewing clipboard text data for the in-Session-Viewer experience.

​
Alert rules on clipboard content

Two predefined alert categories use clipboard data:
  • Clipboard Copy - fires when a copy/cut operation matches a pattern
  • Clipboard Paste - fires when a paste operation matches a pattern (Windows Clients only)
Common rules: copy of strings matching credit card formats, paste into unauthorized applications, copy of source code outside business hours. See Alerts for the alert rule configuration.
Clipboard monitoring is one of the highest-signal monitoring streams. Most users don’t think about clipboard as monitored - making it especially effective for catching deliberate exfiltration attempts. Pair with keystroke alerts for layered insider-threat detection.

User activity recording

Screen capture configuration that runs alongside clipboard monitoring.

File monitoring

The complementary monitoring stream for file-upload operations.

Alerts

Define rules that trigger on clipboard content.

Sessions

Search clipboard text across all sessions.