Detection rules › By eventMicrosoft-Windows-ProcessExitMonitor event 30001 detection rule reference this event. View event page.Splunk (1)Windows Event Triggered Image File Execution Options Injection T1546.012