Description
Detects indicators of compromise consistent with an active intrusion using Microsoft Office Remote Code Execution Vulnerability. The underlying flaw carries the identifier CVE-2017-0199.
INDICATOR-COMPROMISE Microsoft Office Remote Code Execution Vulnerability
IPS-CFW
2 SIDs: 200202, 200203
