Detection rules › By eventMicrosoft-Windows-PrintService event 3161 detection rule reference this event. View event page.Splunk (1)Print Spooler Adding A Printer Driver T1547.012