ATT&CK technique
View on MITRE ATT&CK →
T1008
Fallback Channels
Command and Control
7 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| splunk | Windows Outlook Macro Security Modified | production | 2026-05-13 |
| sigma | Potential Persistence Via Outlook LoadMacroProviderOnBoot Setting | test | 2023-08-17 |
| sigma | Outlook Macro Execution Without Warning Setting Enabled | test | 2023-08-17 |
| sigma | New Outlook Macro Created | test | 2023-02-08 |
| sigma | Suspicious Outlook Macro Created | test | 2023-02-08 |
| sentinel | Excessive NXDOMAIN DNS Queries (ASIM DNS Schema) | Scheduled | — |
| sentinel | Potential DGA detected (ASIM DNS Schema) | Scheduled | — |