Thoughts on whether there are osquery scripts / recipes to find this kind of thing? https://arstechnica.com/gadgets/2019/03/how-microsoft-found-a-huawei-driver-that-opened-systems-up-to-attack/