Microsoft Outlook
Named by 4 kept items in this workspace.
Search every workspace for Microsoft Outlook. It matches the name as written, so it can find other things that share it.
The items that name it 4
preview pane RCEs
Email client through which the initial phishing email was delivered
Abused as a C2 channel by Antino via Microsoft Graph; attacker uses Outlook mailbox folder messages with subject prefix 'command_req_[session_id]' for command exchange.
All technologies in this workspace.