Undeclared File Architecture Features. Automated Office, Text Editor, Docx Format

Abstract

The second paper of this series of articles suggests lifting the veil of secrecy of automated office file formats as a container for manually refining some hidden features. The article discusses an algorithm for implementing one such function — redirecting a hidden link to an active Internet resource. As mentioned earlier in the first part of the article, the increasing number of undeclared functions in the file architecture causes concern among the existing special services of states, which is fully justified by the practical lack of unified software and hardware systems for auditing injections of this kind. Studying simple software tools, unfortunately overlooked by security systems on local PCs and networks, will allow you to build a more powerful closed circuit in the workplace. The existing SIEM in a unified format for building rule bases for closed-circuit auditing does not currently contain ready-made algorithms for detecting extraneous files inside files of automated office formats. This factor needs to be corrected using self-written workplace rules individually. This series of articles does not provide practical instructions for harming the digital environment of the corporate circuit of organizations. The considered scenario of a simple injection with redirection of a link to an Internet resource (redirect function) assumes exclusively educational functions and warnings for information security specialists.