01
detectionlint / library / sigma
Office Application Startup - Office Test
Detects the addition of office test registry that allows a user to specify an arbitrary DLL that will be executed every time an Office application is started
Detects the addition of office test registry that allows a user to specify an arbitrary DLL that will be executed every time an Office application is started