Code Executed Via Office Add-in XLL File

SigmaHQ Detections@sigmaHQ

•updated Sep 3, 2026•0•0•1

Adversaries may abuse Microsoft Office add-ins to obtain persistence on a compromised system. Office add-ins can be used to add functionality to Office programs