Windows EventInformation
Windows Event ID 4697 – Security-Auditing: A Service Was Installed on the System
Event ID 4697 fires when a new Windows service is installed on the system. This security audit event helps track service installations for compliance and security monitoring purposes.
