| Analytic 1116 - AN1116 (e643c4aa-dc7d-43d9-b36e-f13d733f8e9a) |
Analytics |
Detect Office Startup-Based Persistence via Macros, Forms, and Registry Hooks - DET0398 (71a8576b-c9ef-4485-b461-d706fd757a67) |
Detection Strategies |
1 |
| Analytic 1117 - AN1117 (59bfb473-611f-4443-9d11-f44e7ace93fb) |
Analytics |
Detect Office Startup-Based Persistence via Macros, Forms, and Registry Hooks - DET0398 (71a8576b-c9ef-4485-b461-d706fd757a67) |
Detection Strategies |
1 |
| Office Application Startup - T1137 (2c4d4e92-0ccf-4a97-b54c-86d662988a53) |
Attack Pattern |
Detect Office Startup-Based Persistence via Macros, Forms, and Registry Hooks - DET0398 (71a8576b-c9ef-4485-b461-d706fd757a67) |
Detection Strategies |
1 |