Suspicious File Download Using Office Application
Detects the usage of one of three Microsoft office applications (Word, Excel, PowerPoint) to download arbitrary files
Sigma

Detects the usage of one of three Microsoft office applications (Word, Excel, PowerPoint) to download arbitrary files

Already have an account?