VBA DLL Loaded Via Office Application — Detection Rule

Detects VB DLL's loaded by an office application. Which could indicate the presence of VBA Macros.

Read the full analysis on IntelFusions