Suspicious Microsoft Office add-in loaded

Identifies attempts to load unsigned executables from known Microsoft Office add-ins directories, which adversaries may exploit to maintain persistence.

• Plataforma: Windows
• Severidad: High
• Táctica MITRE: Persistencia
• Técnicas MITRE: T1137

Volver a todas las reglas