Windows Outlook Macro Security Modified
This analytic detects the modification of the Windows Registry key "Level" under Outlook Security. This allows macros to execute without warning, which could allow malicious scripts to run without notice. This activity is significant as it is commonly associated with some malware infections, indicating potential malicious intent to harvest email information.
Splunk (SPL)
