Execution via Microsoft Office process

Identifies the execution of the file dropped by Microsoft Office process.

Back to all rules