Detects creation of a new service (kernel driver) with the type "kernel"
Read the full analysis on IntelFusions