Macro execution via script interpreter
Identifies the execution of the Windows scripting interpreter spawning a Microsoft Office process to execute suspicious Visual Basic macro.
- Plataforma: Windows
- Severidad: High
- Táctica MITRE: Acceso inicial
- Técnicas MITRE: T1566, T1566.001