Elastic Windows Event Explorer
Publisher - Microsoft-Windows-Kernel-WSService-StartServiceTrigger
Event IDs
1