DotNET Assembly DLL Loaded Via Office Application — Detection Rule

Detects any assembly DLL being loaded by an Office Product

Read the full analysis on IntelFusions