OneNote.EXE Execution of Malicious Embedded Scripts (84b1706c-932a-44c4-ae28-892b28a25b94)
Detects the execution of malicious OneNote documents that contain embedded scripts. When a user clicks on a OneNote attachment and then on the malicious link inside the ".one" file, it exports and executes the malicious embedded script from specific directories.