Swachchhanda Shrawan Poudel
ca8e778476
update: Suspicious Creation TXT File in User Desktop - Move to a TH rule fix: ffice Macro File Creation - Exclude office binaries fix: Suspicious Msiexec Execute Arbitrary DLL - Make the filter more generic due to the amount of FPs. fix: Script Interpreter Execution From Suspicious Folder - Add filters for chocolatey fix: Suspicious Script Execution From Temp Folder - Add filter for chocolatey fix: Office Autorun Keys Modification - Add filters for shortened paths using tilda fix Outlook Security Settings Updated - Registry - Exclude the outlook process --------- Co-authored-by: Nasreddine Bencherchali <monsteroffire2@gmail.com>
TBD