MITRE ATT&CK detection coverage

← Back to main site

Home/ MITRE Matrix/ Persistence/ T1547.012

T1547.012Print Processors

T1547.012 — Print Processors is a MITRE ATT&CK technique in the Persistence tactic. Clankerusecase tracks 7 detection use cases covering it.

PersistencePrivilege Escalation

View on the matrix → Filter Detection Library MITRE official spec ↗

7Use cases

0Articles

0Sub-techniques

2Tactics

↑ Parent technique: T1547 · Boot or Logon Autostart Execution

Use cases covering this technique (7)

Print Processor Registry Autostart ESCU actions · alerting P Print Spooler Adding A Printer Driver ESCU actions · alerting P Print Spooler Failed to Load a Plug-in ESCU actions · alerting P Spoolsv Spawning Rundll32 ESCU actions · alerting P Spoolsv Suspicious Loaded Modules ESCU actions · alerting P Spoolsv Writing a DLL ESCU actions · alerting P Spoolsv Writing a DLL - Sysmon ESCU actions · alerting P