CPE
Detection of loading known vulnerable Windows drivers that may indicate persistence or privilege escalation attempts via exploitation.