Alerts on trust record modification within the registry, indicating usage of macros
Read the full analysis on IntelFusions