Execution consists of techniques that result in adversary$-$controlled code running on a local or remote system. One technique is to leverage LSA to$$either replace or add illegitimate drivers.$$One method for detecting attempts to load the driver is to monitor the event log and look for which Windows Event ID numbers?

Question $1$ options:

$3063$

$4025$

$3033$

$4653$