Técnica MITRE ATT&CK · Persistencia, Escalada de privilegios

`T1547.012` Print Processors

Subtécnica de T1547 Boot or Logon Autostart Execution

Adversaries may abuse print processors to run malicious DLLs during system boot for persistence and/or privilege escalation. Print processors are DLLs that are loaded by the print spooler service, `spoolsv.exe`, during boot.(Citation: Microsoft Intro Print Processors) Adversaries may abuse the print spooler service by adding print processors that load malicious DLLs at startup. A print processor…

Ficha en MITRE ATT&CK ↗

Quién la usa · con noticias en Jábega

Earth Lusca

Reglas Sigma para cazarla

SigmaHQ no tiene reglas para esta técnica.

Reglas de SigmaHQ · Detection Rule License 1.1. Técnica de MITRE ATT&CK®.