In many cases, Office documents can include different “active content” or macros that can be used for complex automation processes. However, active content can also contain malicious code that is executed when a document is opened. Malicious functions of this kind in Office documents can manipulate other data and programs, as well as the affected documents themselves. Malicious code can also spread further. This may impair or block the functions of all the business processes affected at an organisation. In the worst case, the manipulation remains undetected, resulting in vulnerabilities and the processing of falsified information.