SID username using Powershell script in sentinel

Copper Contributor

Hello everyone,

 

Is there any way to resolve the SID username that came in sentinel alert using Powershell script?

Thanks

1 Reply
Get-WmiObject -Class Win32_UserAccount | Where-Object { $_.SID -eq "" }

Not efficient but it'll work...