Suspicious File Created in Outlook Temporary Directory (fabb0e80-030c-4e3e-a104-d09676991ac3)
Detects the creation of files with suspicious file extensions in the temporary directory that Outlook uses when opening attachments. This can be used to detect spear-phishing campaigns that use suspicious files as attachments, which may contain malicious code.