Suspicious NTLM Authentication on the Printer Spooler Service

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•0•0

Detects a privilege elevation attempt by coercing NTLM authentication on the Printer Spooler service