value:  Cobalt Strike has the ability to use an Excel Workbook to execute additional code by enabling Office to trust macros and execute code without user permission. 
name: Office Application Startup: Office Template Macros