ATT&CK technique
View on MITRE ATT&CK →
T1547.012
Print Processors
PersistencePrivilege Escalation
8 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| elastic | Potential Port Monitor or Print Processor Registration Abuse | production | 2026-09-18 |
| splunk | Print Spooler Adding A Printer Driver | production | 2026-05-13 |
| splunk | Print Spooler Failed to Load a Plug-in | production | 2026-05-13 |
| splunk | Spoolsv Spawning Rundll32 | production | 2026-05-13 |
| splunk | Print Processor Registry Autostart | production | 2026-05-13 |
| splunk | Spoolsv Writing a DLL | production | 2026-05-13 |
| splunk | Spoolsv Writing a DLL - Sysmon | production | 2026-05-13 |
| splunk | Spoolsv Suspicious Loaded Modules | production | 2026-05-13 |