File With Uncommon Extension Created By An Office Application — Detection Rule

Detects the creation of files with an executable or script extension by an Office application.

Read the full analysis on IntelFusions