Unusual Printer Usage

Description

This anomaly looks at different aspects of print jobs from a peer group or user baseline, as well as looking at the extensions of the files that are printed.

Content Mapping

This content is not mapped to any local saved search. Add mapping


Use Case

Insider Threat

Category

Insider Threat, Data Exfiltration

Alert Volume

Low (?)

SPL Difficulty

None

Journey

Stage 4

MITRE ATT&CK Tactics

Exfiltration

MITRE ATT&CK Techniques

Exfiltration Over Physical Medium

Data Sources

Application Data