CCFH-202B: CrowdStrike Certified Falcon Hunter

This process chain is characteristic of email-delivered malware: Outlook opens a link in Internet Explorer, the link leads to a Word document, and a malicious macro in that document launches cmd.exe and PowerShell to execute payload activity.