ATT&CK technique
View on MITRE ATT&CK →
T1137.006
Add-ins
Persistence
6 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| elastic | Persistence via Microsoft Office AddIns | production | 2026-10-09 |
| elastic | Suspicious Execution via Microsoft Office Add-Ins | production | 2026-10-06 |
| sigma | Potential Persistence Via Visual Studio Tools for Office | test | 2026-01-09 |
| sigma | Potential Persistence Via Excel Add-in - Registry | test | 2023-08-17 |
| sigma | Potential Persistence Via Microsoft Office Add-In | test | 2023-02-08 |
| sigma | Code Executed Via Office Add-in XLL File | test | 2021-12-28 |