New Lolbin Process by Office Applications

This rule will monitor any office apps that spins up a new LOLBin process. This activity is pretty suspicious and should be investigated.