When to use Inspect Office macros & active content?
Locally inventory Office components that may trigger code or active behavior — VBA, ActiveX, XLM, DDE, web add-ins, controls and custom ribbons — then separate signatures and embedded objects for review, without executing anything.
- Quickly review a received DOCM/XLSM/PPTM before opening it
- Find VBA, ActiveX, XLM macro sheets, Auto_Open/Auto_Close names or DDE fields
- Document active components and signatures before a security review
- Separate review-first signals from integrity-only items or embedded objects