Sophos Community
Site
User
Site
Search
User
Community & Product Forums
Sophos Endpoint
Sophos Firewall
Sophos Central
Sophos Factory
Sophos Mobile
Sophos NDR
Sophos Cloud Optix
Sophos Switch
Sophos Wireless
Sophos Email
UTM Firewall
Community Chat
All Sophos Products
Community Blogs & Events
Sophos Community Blog
Community Security Blog
Product Documentation Blog
Application Control
Getting Started
Sophos Partners
MSP Guides
Member Recognition
Community Leaderboards
Launch Support Portal
More
Cancel
Sophos Central
Discussions
How to detect Microsoft Office documents spawning processes?
Release Notes & News
Discussions
Recommended Reads
Beta Programs
More
Cancel
New
Sophos Central requires membership for participation - click to join
Thread Info
State
Suggested Answer
Replies
1 reply
Answers
1 answer
Subscribers
9 subscribers
Views
8203 views
Users
0 members are here
Central Endpoint (Windows)
Endpoint & Server Protection
Sophos Central
Scanning/Detections
Intercept X
Options
RSS
More
Cancel
Suggested
How to detect Microsoft Office documents spawning processes?
Bill Elkin
over 1 year ago
How to detect Microsoft Office documents spawning processes? Such as:
PowerShell
CMD
WMI
MSHTA
Etc.
Added TAGs
[
edited by:
Gladys at 4:32 PM (GMT -7) on 24 Mar 2023]
Top Replies
Qoosh
over 1 year ago
+1
suggested
Hi Bill , Thanks for reaching out to the Sophos Community Forum. Sophos Intercept X will prevent many of these malicious behaviours from taking place. The following article describes some of the potential…