SIEM Pull Service has detected via Splunk query that, on this Windows system, a software package was removed. The query used was ((sourcetype=“WinEventLog:System” OR sourcetype=“WinEventLog:Application”) AND remove*)
Binary data 710046.prm