Office App Spawning Suspicious Child Process

Ankit Mehta@Secvyn

•updated Jun 29, 2026•1•0•3

Detects instances where common Microsoft Office applications (Word, Excel, PowerPoint, Outlook) launch suspicious child processes often associated with malicious command execution, such as command shells, scripting interpreters, or system utilities.