| Event Id | 648 |
| Source | Security |
| Description | Security Disabled Local Group Created: Target Account Name: < Target Account Name> Target Domain: < Target Domain> Target Account ID: < Target Account ID> Caller User Name: < Caller User Name> Caller Domain: < Caller Domain> Caller Logon ID: < Caller Logon ID> Privileges: < Privileges> Attributes: Sam Account Name: <Sam Account Name> Sid History: <Sid History> |
| Event Information | Cause : This event is logged when a local security group with security disabled was created. Resolution : This is an information event and no user action is required. |
| Reference Links |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.