I have a lookup file which contains various fields, including the username and corresponding SID (pulled from AD).
I have a Windows event with data showing as User=NOT_TRANSLATED and Sid=(a value)
The CSV file contains a field named User and a field named Sid that matches.
I'm wanting to reference the lookup table to identify the username of the sid that is in the event data.
Any ideas?
↧