Synopsis
SIEM Pull Service has detected via Splunk query that, on this Windows system, a user account was deleted.
Description
SIEM Pull Service has detected via Splunk query that, on this Windows system, a user account was deleted. The query used was (sourcetype="WinEventLog:Security" AND Message="A user account was deleted*")
