Suspicious Spool Service Child Process

SigmaHQ Detections@sigmaHQ

•updated Nov 24, 2025•0•0•0

Detects suspicious print spool service (spoolsv.exe) child processes.