Potential Persistence Via Visual Studio Tools for Office (9d15044a-7cfe-4d23-8085-6ebc11df7685)

Detects persistence via Visual Studio Tools for Office (VSTO) add-ins in Office applications.

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Add-ins - T1137.006 (34f1d81d-fe88-4f97-bd3b-a3164536255d)	Attack Pattern	Potential Persistence Via Visual Studio Tools for Office (9d15044a-7cfe-4d23-8085-6ebc11df7685)	Sigma-Rules	1
Add-ins - T1137.006 (34f1d81d-fe88-4f97-bd3b-a3164536255d)	Attack Pattern	Office Application Startup - T1137 (2c4d4e92-0ccf-4a97-b54c-86d662988a53)	Attack Pattern	2