Trust Access Disable For VBApplications

SigmaHQ Detections@sigmaHQ

•updated Oct 23, 2025•0•13

Detects registry changes to Microsoft Office "AccessVBOM" to a value of "1" which disables trust access for VBA on the victim machine and lets attackers execute malicious macros without any Microsoft Office warnings.