Suspicious Microsoft Office embedded object

Identifies Microsoft Office processes dropping a file with suspicious extension and with the call stack indicating operations to save or load the file from an embedded OLE object.

• Plataforma: Windows
• Severidad: High
• Táctica MITRE: Acceso inicial
• Técnicas MITRE: T1566, T1566.001

Volver a todas las reglas