EventID:4697 (ServiceFileName:set* ServiceFileName:&&*) (ServiceFileName:environment* OR ServiceFileName:invoke* OR ServiceFileName:$\{input\)*)