Suspicious Driver Install by pnputil.exe — Detection Rule

Detects when a possible suspicious driver is being installed via pnputil.exe lolbin

Read the full analysis on IntelFusions