- Clipboard blocking
A clipboard event matched a configured clipboard blocking rule.
The unique identifier for the event. This can be used as an idempotency key.
The unique identifier of the tenant the event belongs to.
Key/value metadata set by the partner that manages this tenant. Only present for tenants managed by a partner. When a partner manages the tenant but has set no metadata, it is present as an empty object rather than omitted or null. A partner may set at most 10 entries, with keys up to 40 characters and values up to 256 characters.
{ "customerRef": "ACME-001", "region": "emea" }
When the event occurred, formatted as a UNIX timestamp (in seconds).
The description of the event. Note: this is subject to change and should not be used to match on this object.
The friendly name of this object. Note: this is subject to change and should not be used to match on this object.
- https://eu1.api.pushsecurity.comhttps://eu1.api.pushsecurity.com/clipboard-blocking-event
{ "version": "1", "id": "c478966c-f927-411c-b919-179832d3d50c", "tenantId": "4f9d2e7a-1b3c-4d5e-8f6a-7c8b9d0e1f2a", "tenantMetadata": { "customerRef": "ACME-001", "region": "emea" }, "timestamp": 1698604061, "category": "CONTROL", "description": "employee@example.com attempted to paste content matching JWT into https://example.com/, but was blocked", "object": "CLIPBOARD_BLOCKING", "friendlyName": "Clipboard blocking", "new": { "employee": { "id": "2a2197de-ad2c-47e4-8dcb-fb0f04cf83e0", "email": "john.hill@example.com", "firstName": "John", "lastName": "Hill", "department": "Security Engineering", "location": "New York", "licensed": true, "chatopsEnabled": true, "creationTimestamp": 1698669223 }, "browserId": "c478966c-f927-411c-b919-179832d3d50c", "url": "https://chat.openai.com/chat", "tabUrl": "https://chat.openai.com/", "operation": "COPY", "action": "DISPLAYED", "mode": "MONITOR", "clipboardBlocking": { "title": "Sensitive content detected", "subtext": "A clipboard copy on https://example.com was blocked because it contained content flagged by our security policy. The following was found: JWT Token.", "copyRedactedButtonText": "Copy redacted version", "copyOriginalButtonText": "Copy original version", "acknowledgeButtonText": "Understood" }, "incognito": true, "sourceIpAddress": "8.158.25.38", "browser": "CHROME", "os": "MACOS", "userAgent": "string", "contentMatch": [ { "enum": "JWT", "regex": "eyJ[a-zA-Z0-9_-]{10,}\\.eyJ[a-zA-Z0-9_-]{10,}\\.[a-zA-Z0-9_-]{10,}", "hash": "6767d8f5dd1f782b4d5bd0c537bb7f8478b8d4adfbcabfb955238a5e292e959c" } ], "content": "string" } }