DFIRHub

Windows registry artifactClipboard History Status

Displays the status of Clipboard History, 0 = Disabled, 1 = Enabled

  • System Info
  • 3 keys
  • SOFTWARE

Registry keys

3 keys that RECmd reads for this artifact

  • SOFTWAREEnableClipboardHistory
    Microsoft\PolicyManager\default\Privacy

    Displays the status of Clipboard History, 0 = Disabled, 1 = Enabled

  • SOFTWAREAllowCrossDeviceClipboard
    Software\Policies\Microsoft\Windows\System

    Displays the status of Clipboard Sync Across Devices, 0 = Disabled, 1 = Enabled

  • SOFTWAREvalue
    Microsoft\PolicyManager\default\Privacy\AllowCrossDeviceClipboard

    Displays the status of Clipboard Sync Across Devices, 0 = Disabled, 1 = Enabled

References

2 links

Source: RECmd/BatchExamples/DFIRBatch.reb(opens in new tab) v2.22 by Andrew Rathbun and contributors(opens in new tab), MIT License(opens in new tab)