1 rule found for "Steffen Rogge (dr0pd34d)"
Detects Microsoft Word loading an Add-In (.wll) file which can be used by threat actors for initial access or persistence.