Re: Detection tools?
The powershell command "Get-WmiObject Win32_PnPSignedDriver | select devicename, signer" looks like a good start. "driverquery /si" also shows which drivers are signed, but not by whom.
On a normal desktop system with no weird devices attached I just have two signers, "Microsoft Windows Hardware Compatibility Publisher" and "Microsoft Windows". If anything signed by the former gets disabled, then I only stand to lose my graphics card, printer, webcam and a selection of motherboard on-board elements such as network and sound. It is not an old system.