Detection rules › By eventMicrosoft-Windows-Shell-Core event 281151 detection rule reference this event. View event page.Sigma (1)Suspicious Application Installed severity medium