Detected Windows Software Discovery — Detection Rule

Adversaries may attempt to enumerate software for a variety of reasons, such as figuring out what security measures are present or if the compromised system has a version of software that is vulnerable.

Read the full analysis on IntelFusions