Potential Persistence Via Outlook LoadMacroProviderOnBoot Setting
심각도 높음 Sigma 탐지 룰. Detects the modification of Outlook setting "LoadMacroProviderOnBoot" which if enabled allows the automatic loading of any configured VBA pr…
작성자: Nasreddine Bencherchali (Nextron Systems) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본