Office Application Startup
Adversaries may leverage Microsoft Office-based applications for persistence between startups. Microsoft Office is a fairly common application suite on Windows-based operating systems within an enterprise network. There are multiple mechanisms that can be used with Office for persistence when an Office-based application is started; this can include the use of Office Template Macros and add-ins. A variety of features have been discovered in Outlook that can be abused to obtain persistence, such ...
BY SOURCE
PROCEDURES (12)
Auto-extracted: 4 detections for registry
Auto-extracted: 2 detections for macro
Auto-extracted: 2 detections for macro
Auto-extracted: 2 detections for email
Auto-extracted: 1 detections for office
Auto-extracted: 1 detections for persist
Auto-extracted: 1 detections for office
Auto-extracted: 1 detections for suspicious
Auto-extracted: 1 detections for suspicious
Auto-extracted: 1 detections for suspicious
Auto-extracted: 1 detections for general monitoring
Auto-extracted: 1 detections for office