Suspicious Rejected SMB Guest Logon From IP — Detection Rule

Detect Attempt PrintNightmare (CVE-2021-1675) Remote code execution in Windows Spooler Service

Read the full analysis on IntelFusions