All Detections

DDE Formula Injection in Office Document

avatar
Darshan Thummar@Mighty
updated Jun 13, 2026002

Detects Dynamic Data Exchange formula injection in Office documents for code execution

Microsoft Sentinel (KQL)