LOLBin Spawned by Office Application - Attack Chain

Georg Lauenstein@gsec

•updated Apr 30, 2026•2•0•78

Detects common LOLBins spawned by Microsoft Office applications, indicating potential macro-based initial access leading to execution