Elastic Windows Event Explorer


Publisher - Microsoft-Windows-Security-IdentityListener

Event ID 4

Message:

Successfully deleted %{Sid} from homeusers group.

Event Data:

# Name In Type
Out Type
1 Sid win:SID xs:string

Observed Windows Versions:

Version: 0

Fingerprint: 5EQQ6N7D75XCW