attack.t1008 | Detection.FYI

Outlook Macro Execution Without Warning Setting Enabled
Feb 9, 2023 · attack.persistence attack.command_and_control attack.t1137 attack.t1008 attack.t1546 ·
Share on:
Detects the modification of Outlook security setting to allow unprompted execution of macros.

Read More
Potential Persistence Via Outlook LoadMacroProviderOnBoot Setting
Feb 9, 2023 · attack.persistence attack.command_and_control attack.t1137 attack.t1008 attack.t1546 ·
Share on:
Detects the modification of Outlook setting "LoadMacroProviderOnBoot" which if enabled allows the automatic loading of any configured VBA project/module

Read More
New Outlook Macro Created
Feb 8, 2023 · attack.persistence attack.command_and_control attack.t1137 attack.t1008 attack.t1546 ·
Share on:
Detects the creation of a macro file for Outlook.

Read More
Suspicious Outlook Macro Created
Feb 8, 2023 · attack.persistence attack.command_and_control attack.t1137 attack.t1008 attack.t1546 ·
Share on:
Detects the creation of a macro file for Outlook.

Read More