How can I find a username from a memberSID in Sentinel?
Asked by
CuriousCat99
I received an alert saying "user account added to built in domain local or global group." The logs show a memberSID, but the member name is blank. I created a ticket, and the point of contact wants to know how to find the username associated with that memberSID. I'm unsure of the process to do this. Any help would be appreciated!
Answers
I'm not really sure about these specifics either. If anyone has more detailed instructions on this or example commands, that would be really helpful.
Reply to this answer
Have you tried searching for it online? It might seem straightforward, but knowing what to search can really help. A simple Google search with the terms 'find username from memberSID' could lead you to some useful resources or guides.
Reply to this answer
This looks like more of an Active Directory issue than an Azure one. You can use PowerShell to find the username associated with the memberSID. The command `Get-ADUser -Identity ` should do the trick. Make sure you have the right permissions to run this.
Reply to this answer
Add your answer
Answers are reviewed before publication.
Related Discussions