EDR ALERT

Suspicious Process Chain

Device

WS-042

User

amartin

Detection

Office application spawned script interpreter

First seen

14:07