Event ID 20 WindowsUpdateClient Installation Failure and How to Find the Cause

This post first appeared on the ET Ducky blog. I build ET Ducky, an RMM that reads ETW on Windows and eBPF on Linux. Event ID 20 from Microsoft-Windows-WindowsUpdateClient is the event Windows writes