Detections
Explore public detection logic contributed by the community across SIEM and rule languages.
1 detection
Filters
Last updated
All Time
Detection languages
1
Contributors
1
Categories
1
1
1
Platforms
1
Products / Services
1
MITRE Techniques
1
CVEs
71
71
64
58
49
Detects the remote installation of a print driver, which is a possible indication of the exploitation of PrintNightmare (CVE-2021-1675, CVE-2021-34527). The occurrence of print drivers being installed remotely via RPC functions should be rare, as print drivers are normally installed locally or through group policy.
