TargetUser

Sid

String

Which user (account SID) is behind the given event

SidNameUse

Symbol

Which group (its SID type) is behind the given event

Groups are:

•1—User

•2—Group

•3—Domain

•4—Alias

•5—WellKnownGroup

•6—DeletedAccount

•7—Invalid

•8—Unknown

•9—Computer

•10—Label

•11—LogonSession

UserName

String

Which user (account name) is behind the given event