Hi team,

One of our users kept getting stack pivoting events while opening excel, pdf and word within an email from Outlook. Below is an example of the event logs, please investigate and advise.

EMET detected StackPivot mitigation and will close the application: EXCEL.EXE StackPivot check failed: Application : C:\Program Files\Microsoft Office\Office15\EXCEL.EXE User Name : TOYOTA\t27851 Session ID : 1 PID : 0x23D4 (9172) TID : 0x162C (5676) API name : ntdll.NtSetContextThread ReturnAddress : 0x767F0E7C CalledAddress : 0x771A65C0 Thread stack area range: [0x269EE000..0x269F0000] StackPtr : 0x26D6F6D8

Regards,

Kenneth