Outlook EnableUnsafeClientMailRules Setting Enabled — Detection Rule

Detects an attacker trying to enable the outlook security setting "EnableUnsafeClientMailRules" which allows outlook to run applications or execute macros

Read the full analysis on IntelFusions