Skip to content

Hide Navigation Hide TOC

Office Macro File Creation From Suspicious Process (b1c50487-1967-4315-a026-6491686d860e)

Detects the creation of a office macro file from a a suspicious process

Cluster A Galaxy A Cluster B Galaxy B Level
Office Macro File Creation From Suspicious Process (b1c50487-1967-4315-a026-6491686d860e) Sigma-Rules Spearphishing Attachment - T1566.001 (2e34237d-8574-43f6-aace-ae2915de8597) Attack Pattern 1
Phishing - T1566 (a62a8db3-f23a-4d8f-afd6-9dbc77e7813b) Attack Pattern Spearphishing Attachment - T1566.001 (2e34237d-8574-43f6-aace-ae2915de8597) Attack Pattern 2