| Event Id | 4792 |
| Source | Microsoft-Windows-Security-Auditing |
| Description | An LDAP query group was deleted.
Subject: Security ID: <Security ID> Account Name:<Account Name> Account Domain: <Domain Name> Logon ID: <Logon ID> Group: Security ID:<Security ID> Account Name:<Account Name> Account Domain: <Domain Name> Additional Information: Privileges: |
| Event Information | Cause : The user can delete the LDAP Query group or Business Rule Application Group (BRAP) identified in Group. Resolution : This is an information event and no user action is required. |
| Reference Links |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.