Microsoft VBA For Outlook Addin Loaded Via Outlook

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•16

Detects when the 'outlvba.dll' (Microsoft VBA for Outlook Addin) is loaded by the 'outlook.exe' process. This activity can indicate the use of VBA macros within Outlook, which can be leveraged for persistence or execution by adversaries.