Endpoint Security support for the Microsoft Antivirus API included with Microsoft Office
Last Modified: 2023-02-21 21:39:13 Etc/GMT
Affected Products
Languages:
This article is available in the following languages:
Trellix CEO, Bryan Palma, explains the critical need for security that’s always learning.
As per Gartner, "XDR is an emerging technology that can offer improved threat prevention, detection and response."
Trellix announced the establishment of the Trellix Advanced Research Center to advance global threat intelligence.
Trellix Advanced Research Center analyzes threat data on ransomware, nation-states, sectors, vectors, LotL, MITRE ATT&CK techniques, and emails.
As of May 14, 2024, Knowledge Base (KB) articles will only be published and updated in our new Trellix Thrive Knowledge space.
Log in to the Thrive Portal using your OKTA credentials and start searching the new space. Legacy KB IDs are indexed and you will be able to find them easily just by typing the legacy KB ID.
Endpoint Security support for the Microsoft Antivirus API included with Microsoft Office
Technical Articles ID:
KB53813
Last Modified: 2023-02-21 21:39:13 Etc/GMT EnvironmentEndpoint Security (ENS) Threat Prevention 10.x
Microsoft Office Suite 2007 and later Microsoft Antivirus API
Problem
Microsoft Office applications support antivirus products via the Microsoft Antivirus API (Application Programming Interface). With the API, macros don't run as expected when the macro contains an encrypted Office Open XML file, such as:
With ENS, an error similar to the one below is generated when running a macro:
NOTE: Files saved in Microsoft Office 97 or 2003 formats don't generate the error.
Cause
The text in the error message is misleading. ENS can and does scan macros. The error actually occurs because there's no antivirus software installed that uses the Microsoft Antivirus API. ENS doesn't use this function because it scans files when a user or application first accesses the files, before the Microsoft Antivirus API is invoked.
Solution
There are no plans for ENS to use the Microsoft Antivirus API. To submit a new product idea, go to the Enterprise Customer Product Ideas page.
Click Sign In and enter your ServicePortal User ID and password. If you do not yet have a ServicePortal or Community account, click Register to register for a new account on either website. For more information about product ideas, see KB60021 - How to submit a Product Idea. Previous Document ID (Secured)
616744
Affected ProductsLanguages:This article is available in the following languages: |
|