Synopsis
SIEM Pull Service has detected via Splunk query that, on this Windows system, a user was removed from a group.
Description
SIEM Pull Service has detected via Splunk query that, on this Windows system, a user was removed from a group. The query used was (sourcetype="WinEventLog:Security" Message="A member was removed*group*")
