Print Drivers!
"An unprivileged user uploading a new printer driver to the print server isn't an everyday occurrence and should raise suspicions.""
It's not users installing print drivers on their local machines, it's regular (non-admin) users installing print drivers on domain controllers!
Biting the hand that feeds IT
