- Office macros: added MITRE ATT&CK annotation to the rule that detects macro executions.
- Office macros [I785]: macro execution setting changes are now detected correctly; each of the four settings generates a specific event.
- Office macros [I786]: no more duplicate events when macros are executed.