Provider_Name:Service\ Control\ Manager EventID:7045 (ImagePath:powershell* OR ImagePath:pwsh*)