Netskope Threat Labs

FILE-IDENTIFY Microsoft Office Excel file magic detected

IPS-CFWIPS-SWG

1 SID: 19166

Detects network traffic carrying the legacy Microsoft Excel workbook signatures. Identifying Excel files in transit supports inspection policies, since macro-bearing workbooks are a common phishing payload.