Detects execution of the Add-In deployment cache updating utility (AddInutil.exe) with suspicious Addinroot or Pipelineroot paths. An adversary may execute AddinUtil.exe with uncommon ...
description: Detects the creation of scheduled tasks by user accounts via the "schtasks" utility. # schtasks.exe /Create /tn "Microsoft\Office\Office Performance Monitor" /XML ...
一些您可能无法访问的结果已被隐去。
显示无法访问的结果