win:printservice
Print Service logs
Channel: Microsoft-Windows-PrintService/*
- Host type
- Windows (workstation, member server, domain controller)
- Techniques
- 0
- Rules listed
- 4
- Events
- 4
Techniques
No ATT&CK analytic names this source.
Rules
Sigma 2
- CVE-2021-1675 Print Spooler Exploitation by Florian Roth (Nextron Systems)
- Possible CVE-2021-1675 Print Spooler Exploitation by Florian Roth (Nextron Systems), KevTheHermit, fuzzyf10w, Tim Shelton