Advisory: Sophos Endpoint "Your connection isn't private" after reboot. Policy settings can be returned to normal. See: KB-000045954 for the latest updates.

How to detect Microsoft Office documents spawning processes?

How to detect Microsoft Office documents spawning processes? Such as: 

  • PowerShell
  • CMD
  • WMI
  • MSHTA
  • Etc.


Added TAGs
[edited by: Gladys at 4:32 PM (GMT -7) on 24 Mar 2023]