Microsoft-Windows-User-PnP
| Event | Title | Channel | Sample | Rule |
|---|---|---|---|---|
| 20001 | Driver Management concluded the process to install driver {DriverName} for … | System | N | N |
| 20002 | Driver Management concluded the process to remove driver {DriverName} from … | System | N | N |
| 20003 | Driver Management has concluded the process to add Service {ServiceName} for … | System | N | N |
| 20004 | Driver Management has concluded the process to remove Service {ServiceName} for … | System | N | N |