LoFP LoFP / t1014

t1014

TitleTags
false positives are present based on automated tooling or system administrative usage. filter as needed.
false positives may be present based on legitimate third party applications needing to install drivers. filter, or allow list known good drivers consistently being installed in these paths.
this analytic is meant to assist with identifying drivers loaded in the environment and not to be setup for notables off the bat.
unlikely