Skip to content

Hide Navigation Hide TOC

Suspicious Outlook Child Process (208748f7-881d-47ac-a29c-07ea84bf691d)

Detects a suspicious process spawning from an Outlook process.

Cluster A Galaxy A Cluster B Galaxy B Level
Suspicious Outlook Child Process (208748f7-881d-47ac-a29c-07ea84bf691d) Sigma-Rules Malicious File - T1204.002 (232b7f21-adf9-4b42-b936-b9d6f7df856e) Attack Pattern 1
User Execution - T1204 (8c32eb4d-805f-4fc5-bf60-c4d476c131b5) Attack Pattern Malicious File - T1204.002 (232b7f21-adf9-4b42-b936-b9d6f7df856e) Attack Pattern 2