Trying to find documents where user's have clicked "enabled macros" in MSFT Office?
Look at HKEY_USERS|HKCU\Software\Microsoft\Office\.*\Security\Trusted Documents\TrustRecords reg keys for values ending in FFFFFF7F
The social network of the future: No ads, no corporate surveillance, ethical design, and decentralization! Own your data with Mastodon!