Potential Persistence Via Outlook Form (c3edc6a5-d9d4-48d8-930e-aab518390917)

Detects the creation of a new Outlook form which can contain malicious code

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Potential Persistence Via Outlook Form (c3edc6a5-d9d4-48d8-930e-aab518390917)	Sigma-Rules	Outlook Forms - T1137.003 (a9e2cea0-c805-4bf8-9e31-f5f0513a3634)	Attack Pattern	1
Office Application Startup - T1137 (2c4d4e92-0ccf-4a97-b54c-86d662988a53)	Attack Pattern	Outlook Forms - T1137.003 (a9e2cea0-c805-4bf8-9e31-f5f0513a3634)	Attack Pattern	2