Office Application Spawning Suspicious Child Process

Ibrahim Saud@tektrix

•updated 6 days ago•0•0•0

Detects Microsoft Office applications (Word, Excel, Outlook, PowerPoint) spawning common LOLBins or command-line interpreters. This behavior is frequently associated with malicious macros or exploitation attempts delivering secondary payloads.