Copy Events Generated from Windows Process Activity

Issue:

Copy events were observed in Lepide reports without expected user action.

Findings:

• Copy events were reproduced during the session

• Using Process Monitor, it was confirmed that these events are generated by system/process activity

• Windows is generating these events at the OS level

• Lepide is auditing and reporting these events as received
  

Conclusion:

• Behaviour is environment-specific

• Lepide is working as expected

• Events are generated by Windows, not Lepide