What is the COM hijacking persistence technique used by APT group Trula against Outlook?

The technique, documented in [Use COM Object hijacking to maintain persistence——Hijack Outlook](/news/use-com-object-hijacking-to-maintain-persistence-hijack-outlook), involves modifying two registry entries under HKCU\Software\Classes\CLSID to hijack COM objects that Outlook loads during startup. This forces Outlook to load a malicious DLL, requiring only current user permissions and making it a low-privilege persistence method favored by the Trula APT group.