Kill Chain: OUTLOOK.EXE -> Acrobat -> Edge to Google Sites

Ankit Mehta@Secvyn

•updated Sep 7, 2026•0•0•1

Detects a sequence of events where a PDF file opened from a Microsoft Outlook content directory triggers an immediate subsequent execution of a Microsoft Edge process pointing to a Google Sites URL, or containing suspicious command line arguments often associated with malicious redirection or web-based credential harvesting.