Skip to content

Hide Navigation Hide TOC

Outlook Macro Execution Without Warning Setting Enabled (e3b50fa5-3c3f-444e-937b-0a99d33731cd)

Detects the modification of Outlook security setting to allow unprompted execution of macros.

Cluster A Galaxy A Cluster B Galaxy B Level
Fallback Channels - T1008 (f24faf46-3b26-4dbb-98f2-63460498e433) Attack Pattern Outlook Macro Execution Without Warning Setting Enabled (e3b50fa5-3c3f-444e-937b-0a99d33731cd) Sigma-Rules 1
Outlook Macro Execution Without Warning Setting Enabled (e3b50fa5-3c3f-444e-937b-0a99d33731cd) Sigma-Rules Event Triggered Execution - T1546 (b6301b64-ef57-4cce-bb0b-77026f14a8db) Attack Pattern 1
Outlook Macro Execution Without Warning Setting Enabled (e3b50fa5-3c3f-444e-937b-0a99d33731cd) Sigma-Rules Office Application Startup - T1137 (2c4d4e92-0ccf-4a97-b54c-86d662988a53) Attack Pattern 1