Suspicious Microsoft Office Child Process - MacOS — Detection Rule

Detects suspicious child processes spawning from microsoft office suite applications such as word or excel. This could indicates malicious macro execution

Read the full analysis on IntelFusions