FILE-OTHER -- Snort detected traffic targeting vulnerabilities in a file type that does not require enough rule coverage to have its own category.
FILE-OTHER LibreOffice macro remote code execution attempt
This event is generated when a file containing a LibreOffice macro remote code execution attempt is detected. Impact: Attempted User Privilege Gain Details: Ease of Attack:
This rule will alert on files that contain malicious macros.
No public information
No known false positives
Cisco Talos Intelligence Group
MITRE::ATT&CK Framework::Enterprise::Execution::User Execution::Malicious File
Escalation of Privilege
An Escalation of Privilege (EOP) attack is any attack method that results in a user or application gaining permissions to access resources they normally would not have access to.