Windows Spooler Service Suspicious Binary Load

심각도 참고 Sigma 탐지 룰. Detect DLL Load from Spooler Service backup folder. This behavior has been observed during the exploitation of the Print Spooler Vulnerabili…

관련 CVE: CVE-2021-1675, CVE-2021-34527

작성자: FPT.EagleEye, Thomas Patzke (improvements) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본