CmdID / Techniques

T1137 Office Application Startup

Adversaries may leverage Microsoft Office-based applications for persistence between startups. MITRE ATT&CK

T1137 on attack.mitre.org