Microsoft Office Trusted Location Updated — Detection Rule

Detects changes to the registry keys related to "Trusted Location" of Microsoft Office. Attackers might add additional trusted locations to avoid macro security restrictions.

Read the full analysis on IntelFusions