value:  After APT33 initially gained access to Microsoft Exchange accounts through password spraying, the threat actors replaced the Outlook homepage for the victim accounts with a malicious Microsoft Outlook homepage URL crafted through Ruler. 
name: Office Application Startup: Outlook Home Page