OneNote is one of the Office suite components which is often overlooked when RedTeaming. Though OneNote cannot execute VBA Macros, it has an important potential for phishing as an initial vector.
Article Link: https://blog.sevagas.com:80/?RedTeam-With-OneNote