security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: update duplicate title

Browse Source
This commit is contained in:
Nasreddine Bencherchali
2023-02-08 19:16:53 +01:00
parent d78e66dde3
commit 4d1bd7663b
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
rules/windows/image_load/image_load_office_outlook_outlvba.yml
+3 -3
View File
@@ -1,7 +1,7 @@
title: Macro Enabled DLL Loaded Via Office Applications
id: ff0f2b05-09db-4095-b96d-1b75ca24894a
title: Microsoft VBA For Outlook Addin Loaded Via Outlook
id: 9a0b8719-cd3c-4f0a-90de-765a4cb3f5ed
status: test
description: Detects any assembly DLL being loaded by an Office Product
description: Detects outlvba (Microsoft VBA for Outlook Addin) DLL being loaded by the outlook process
references:
- https://speakerdeck.com/heirhabarov/hunting-for-persistence-via-microsoft-exchange-server-or-outlook?slide=58
author: Nasreddine Bencherchali (Nextron Systems)