Skip to content

Conversation

@humpalum
Copy link

Matches registry events that changes the URL value for the WebView of Outlook which could enable persistence for hackers.

Ref:
https://speakerdeck.com/heirhabarov/hunting-for-persistence-via-microsoft-exchange-server-or-outlook?slide=70

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant