> ## Documentation Index
> Fetch the complete documentation index at: https://syteca.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Clipboard Monitoring

> Monitor Copy, Cut, and Paste operations performed on Client computers - capture clipboard text alongside screen recordings, and trigger alerts on specific clipboard content patterns.

The **Clipboard monitoring** parameter captures text data on Copy, Cut, and Paste operations performed on Client computers. Clipboard text appears in the Session Viewer alongside screen recordings, becomes searchable across sessions, and can drive alert rules - useful for catching credential exfiltration, intellectual-property copy-out, and document-content tampering.

<Note>
  **Applies to**: Windows Clients, macOS Clients. The parameter behaves identically across both platforms.
</Note>

## Where to find it

The **Enable clipboard monitoring** checkbox lives on the **Editing Client** / **Editing Client Group** page, on the **Monitoring \[Windows/macOS]** tab, in the **Monitoring Parameters** section at the top.

## What gets captured

When enabled, the Client logs text data on:

* **Cut operations** - `Ctrl+X`, `Shift+Del`, or **Cut** from the context menu
* **Copy operations** - `Ctrl+C`, `Ctrl+Ins`, or **Copy** from the context menu
* **Paste operations** - `Ctrl+V`, `Shift+Ins`, or **Paste** from the context menu *(Windows Clients only - macOS Clients capture Cut and Copy but not Paste)*

Only **text data** is captured. Image, file, or rich-object clipboard contents aren't recorded.

## Where to view captured clipboard text

| Location                                              | What you see                                                   |
| ----------------------------------------------------- | -------------------------------------------------------------- |
| **Session Viewer → Metadata grid → Text Data column** | All clipboard events in sequence with timestamps               |
| **Session Viewer → Details area**                     | Clipboard event detail for the selected timestamp              |
| **Activity Monitoring → Client Sessions tab**         | Search across all sessions for clipboard text matching a query |

See [Viewing clipboard text data](/docs/session-monitoring/player/per-os-playback#clipboard-text-data) for the in-Session-Viewer experience.

## Alert rules on clipboard content

Two predefined alert categories use clipboard data:

* **Clipboard Copy** - fires when a copy/cut operation matches a pattern
* **Clipboard Paste** - fires when a paste operation matches a pattern *(Windows Clients only)*

Common rules: copy of strings matching credit card formats, paste into unauthorized applications, copy of source code outside business hours. See [Alerts](/docs/session-monitoring/alerts) for the alert rule configuration.

<Tip>
  **Clipboard monitoring is one of the highest-signal monitoring streams.** Most users don't think about clipboard as monitored - making it especially effective for catching deliberate exfiltration attempts. Pair with [keystroke alerts](/docs/session-monitoring/alerts) for layered insider-threat detection.
</Tip>

## Related

<CardGroup cols={2}>
  <Card title="User activity recording" icon="video" href="/docs/session-monitoring/recording/user-activity-recording">
    Screen capture configuration that runs alongside clipboard monitoring.
  </Card>

  <Card title="File monitoring" icon="file-plus" href="/docs/session-monitoring/recording/file-monitoring">
    The complementary monitoring stream for file-upload operations.
  </Card>

  <Card title="Alerts" icon="bell" href="/docs/session-monitoring/alerts">
    Define rules that trigger on clipboard content.
  </Card>

  <Card title="Sessions" icon="list-video" href="/docs/session-monitoring/sessions-list">
    Search clipboard text across all sessions.
  </Card>
</CardGroup>
