Use case creation in SIEM - Malicious download

Please let me know any windows event id will be triggred. If a user is accidentally clicked the Phishing link and malicious code downloaded and executed in user machine.

EDR solution have a capability. But I am interested to know any windows event id. Is it possible ?

use case 1 : User clicked the phishing link

User case 2: malicious code downloaded and executed.

case download malicious malware siem use case