Suspicious Download from Office Domain

SigmaHQ Detections@sigmaHQ

•updated Jun 4, 2025•0•0•1

Detects suspicious ways to download files from Microsoft domains that are used to store attachments in Emails or OneNote documents