Event ID 4697 - A Service was installed in the system

A service was installed in the system

If this event is monitored by a tool, such as Manage Engine's AD audit, then the following e-mail notification will be sent if it is configured.

Many are wondering what that means “Event ID 4697” and what to do with this notification.

In this document I just want to explain what the event means.

Event ID 4697 - A Service was installed in the system

Windows SMBv3 vulnerability CVE-2020-0796