Tool

github.com/cube0x0/impacket/commit/73b9466c17761384ece11e1028ec6689abad6818

https://github.com/cube0x0/impacket/commit/73b9466c17761384ece11e1028ec6689abad6818
Published on
github.com

ATT&CK techniques those detections carry

  • T1068Exploitation for Privilege Escalation
  • T1547.012Print Processors
Open the original

2 published detections cite this

Citing it, not covering it: each of these was written with this as evidence, and carries the source it came from and the licence it was published under.

Detections citing this reference
DetectionSeverity
Spoolsv Writing a DLL - SysmonMedium
Spoolsv Suspicious Process AccessMedium

Detections can measure how the public catalogue is used — which detections people look for, and which pages bring them here. It sets a cookie that recognises this browser for 180 days. It is never linked to an account and never follows you to other sites. Privacy notice