Advisory: Sophos Endpoint "Your connection isn't private" after reboot. Policy settings can be returned to normal. See: KB-000045954 for the latest updates.

Block or log if user run any vba macro in office


Is it possible to log or block if user tries to run any vba macro in office applications?


Added tags
[edited by: Gladys at 6:13 AM (GMT -8) on 6 Dec 2023]
Parents Reply
  • Yes, by any chance, do you have the VBS macros script in your possession? This is one of the most important data we need, as we need you to replicate the scenario first while running process monitoring and then collect the PML logs.
    Once done, collect SDU logs on the system, then attach them to the case you've created for our team to review.
    Also, you can share the case ID for us to monitor its status 

    Glenn ArchieSeñas (GlennSen)
    Global Community Support Engineer

    The New Home of Sophos Support Videos!  Visit Sophos Techvids
No Data