Skip to content
Threat Feed

Tag

Add-Ins

1 brief RSS
high advisory

Persistence via Microsoft Office Add-Ins File Creation

This rule detects attempts to establish persistence on Windows endpoints by abusing Microsoft Office add-ins through the creation of malicious files in Office startup directories.

Microsoft Office AddIns +4 persistence ms-office add-ins windows
2r 1t