Suspicious Microsoft OneNote Child Process

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•0•1

Detects suspicious child processes of the Microsoft OneNote application. This may indicate an attempt to execute malicious embedded objects from a .one file.