<span class="pill kill-chain">_time</span>
</div>
Data Source: Windows Event Log Printservice 4909
Description
Data source object for Windows Event Log Printservice 4909
Details
| Property | Value |
|---|---|
| Source | XmlWinEventLog:Security |
| Sourcetype | XmlWinEventLog |
| Separator | EventCode |
Related Detections
| Name | Technique | Type |
|---|---|---|
| Print Spooler Failed to Load a Plug-in | Print Processors | TTP |
Supported Apps
- Splunk Add-on for Microsoft Windows (version 9.1.2)
Event Fields
Fields
Source: GitHub | Version: 2