attack.t1137

Outlook Security Settings Updated - Registry
Feb 9, 2023 · attack.persistence attack.t1137 ·
Share on:
Detects changes to the registry values related to outlook security settings

Read More
Outlook Macro Execution Without Warning Setting Enabled
Feb 9, 2023 · attack.persistence attack.command_and_control attack.t1137 attack.t1008 attack.t1546 ·
Share on:
Detects the modification of Outlook security setting to allow unprompted execution of macros.

Read More
Potential Persistence Via Outlook LoadMacroProviderOnBoot Setting
Feb 9, 2023 · attack.persistence attack.command_and_control attack.t1137 attack.t1008 attack.t1546 ·
Share on:
Detects the modification of Outlook setting "LoadMacroProviderOnBoot" which if enabled allows the automatic loading of any configured VBA project/module

Read More
New Outlook Macro Created
Feb 8, 2023 · attack.persistence attack.command_and_control attack.t1137 attack.t1008 attack.t1546 ·
Share on:
Detects the creation of a macro file for Outlook.

Read More
Suspicious Outlook Macro Created
Feb 8, 2023 · attack.persistence attack.command_and_control attack.t1137 attack.t1008 attack.t1546 ·
Share on:
Detects the creation of a macro file for Outlook.

Read More
Office Template Creation
Feb 1, 2023 · attack.persistence attack.t1137 ·
Share on:
Detects creation of template files for Microsoft Office from outside Office

Read More
Registry Modification to Hidden File Extension
Jan 27, 2023 · attack.persistence attack.t1137 ·
Share on:
Hides the file extension through modification of the registry

Read More
IE Change Domain Zone
Jan 6, 2023 · attack.persistence attack.t1137 ·
Share on:
Hides the file extension through modification of the registry

Read More