Outlook Task/Note Reminder Registry Modification

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•1•0•22

Detects changes to Outlook registry values indicating a reminder was triggered for a Note or Task item. This activity could be related to the exploitation of CVE-2023-23397, a critical vulnerability in Microsoft Outlook that allows for NTLM relay attacks without user interaction. Further investigation is required to determine the success of an exploitation.