Office Macro Policy Downgrade

nomit vyas@xoxo

•updated Feb 8, 2026•2•0•38

Detects the modification of Microsoft Office Trust Center settings to weaken macro security policies. This is a common technique used by attackers to enable malicious macros in documents, bypassing default security controls.