Office Macros Warning Disabled

SigmaHQ Detections@sigmaHQ

•updated Apr 28, 2026•0•0•1

Detects registry changes to Microsoft Office "VBAWarning" to a value of "1" which enables the execution of all macros, whether signed or unsigned.