Corner Bowl Server Manager
Report Completed
Report
Security Group Management Report (Generic)
Type
Event Log Report
Hosts
172.16.146.23 Azure Domain Controller Corner Bowl Management Server Northbowl
Production Web Server Sandy
Logs
Security
Time
9/30/2022 8:33:03 AM
Date Range
9/24/2022 - 9/30/2022
Count
2,015

Security Group Management Report (Generic) | 987206-db1 | 1,913
LevelTimeHostEventDescriptionSecurity IDAccount NameAccount DomainMember Security IDMember Account NameGroup Security IDGroup NameGroup Domain
Success Audit9/30/2022 7:27:33 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 7:27:33 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 7:12:33 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 7:12:33 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 6:57:33 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 6:57:33 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 6:42:33 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 6:42:33 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 6:27:33 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 6:27:33 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 6:12:33 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 6:12:33 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 5:57:33 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 5:57:33 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 5:42:33 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 5:42:33 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 5:27:33 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 5:27:33 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 5:12:33 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 5:12:33 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 4:57:33 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 4:57:33 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 4:42:33 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 4:42:33 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 4:42:31 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 4:42:31 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 4:42:30 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 4:42:30 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 4:42:25 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 4:42:17 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 4:42:17 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 4:42:15 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 4:42:15 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 4:42:14 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 4:42:14 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 4:42:11 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 4:42:11 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 4:42:11 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 4:42:11 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 4:42:11 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 4:42:11 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 4:42:11 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 4:42:09 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 4:42:09 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 4:42:09 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 4:42:09 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 4:42:09 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 4:27:41 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 4:27:41 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 4:12:41 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 4:12:41 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 3:57:41 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 3:57:41 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 3:42:41 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 3:42:41 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 3:27:41 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 3:27:41 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 3:12:41 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 3:12:41 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 2:57:41 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 2:57:41 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 2:42:41 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 2:42:41 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 2:27:40 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 2:27:40 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 2:12:41 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 2:12:41 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 2:00:09 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-18987206-DB1$WORKGROUPS-1-5-32-544AdministratorsBuiltin
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-18
    Account Name: 987206-DB1$
    Account Domain: WORKGROUP
    Logon ID: 0x3E7

Group:
    Security ID: S-1-5-32-544
    Group Name: Administrators
    Group Domain: Builtin

Process Information:
    Process ID: 0x1604
    Process Name: C:\Windows\System32\wbem\WmiPrvSE.exe
 
Success Audit9/30/2022 2:00:09 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-18987206-DB1$WORKGROUPS-1-5-32-544AdministratorsBuiltin
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-18
    Account Name: 987206-DB1$
    Account Domain: WORKGROUP
    Logon ID: 0x3E7

Group:
    Security ID: S-1-5-32-544
    Group Name: Administrators
    Group Domain: Builtin

Process Information:
    Process ID: 0x1604
    Process Name: C:\Windows\System32\wbem\WmiPrvSE.exe
 
Success Audit9/30/2022 2:00:08 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-18987206-DB1$WORKGROUPS-1-5-32-544AdministratorsBuiltin
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-18
    Account Name: 987206-DB1$
    Account Domain: WORKGROUP
    Logon ID: 0x3E7

Group:
    Security ID: S-1-5-32-544
    Group Name: Administrators
    Group Domain: Builtin

Process Information:
    Process ID: 0x1604
    Process Name: C:\Windows\System32\wbem\WmiPrvSE.exe
 
Success Audit9/30/2022 2:00:07 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-18987206-DB1$WORKGROUPS-1-5-32-544AdministratorsBuiltin
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-18
    Account Name: 987206-DB1$
    Account Domain: WORKGROUP
    Logon ID: 0x3E7

Group:
    Security ID: S-1-5-32-544
    Group Name: Administrators
    Group Domain: Builtin

Process Information:
    Process ID: 0x1604
    Process Name: C:\Windows\System32\wbem\WmiPrvSE.exe
 
Success Audit9/30/2022 2:00:07 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-18987206-DB1$WORKGROUPS-1-5-32-544AdministratorsBuiltin
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-18
    Account Name: 987206-DB1$
    Account Domain: WORKGROUP
    Logon ID: 0x3E7

Group:
    Security ID: S-1-5-32-544
    Group Name: Administrators
    Group Domain: Builtin

Process Information:
    Process ID: 0x1604
    Process Name: C:\Windows\System32\wbem\WmiPrvSE.exe
 
Success Audit9/30/2022 2:00:06 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-18987206-DB1$WORKGROUPS-1-5-32-544AdministratorsBuiltin
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-18
    Account Name: 987206-DB1$
    Account Domain: WORKGROUP
    Logon ID: 0x3E7

Group:
    Security ID: S-1-5-32-544
    Group Name: Administrators
    Group Domain: Builtin

Process Information:
    Process ID: 0x1604
    Process Name: C:\Windows\System32\wbem\WmiPrvSE.exe
 
Success Audit9/30/2022 2:00:05 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-18987206-DB1$WORKGROUPS-1-5-32-544AdministratorsBuiltin
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-18
    Account Name: 987206-DB1$
    Account Domain: WORKGROUP
    Logon ID: 0x3E7

Group:
    Security ID: S-1-5-32-544
    Group Name: Administrators
    Group Domain: Builtin

Process Information:
    Process ID: 0x1604
    Process Name: C:\Windows\System32\wbem\WmiPrvSE.exe
 
Success Audit9/30/2022 2:00:03 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-18987206-DB1$WORKGROUPS-1-5-32-544AdministratorsBuiltin
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-18
    Account Name: 987206-DB1$
    Account Domain: WORKGROUP
    Logon ID: 0x3E7

Group:
    Security ID: S-1-5-32-544
    Group Name: Administrators
    Group Domain: Builtin

Process Information:
    Process ID: 0x1604
    Process Name: C:\Windows\System32\wbem\WmiPrvSE.exe
 
Success Audit9/30/2022 2:00:03 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-18987206-DB1$WORKGROUPS-1-5-32-544AdministratorsBuiltin
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-18
    Account Name: 987206-DB1$
    Account Domain: WORKGROUP
    Logon ID: 0x3E7

Group:
    Security ID: S-1-5-32-544
    Group Name: Administrators
    Group Domain: Builtin

Process Information:
    Process ID: 0x1604
    Process Name: C:\Windows\System32\wbem\WmiPrvSE.exe
 
Success Audit9/30/2022 2:00:03 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-18987206-DB1$WORKGROUPS-1-5-32-544AdministratorsBuiltin
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-18
    Account Name: 987206-DB1$
    Account Domain: WORKGROUP
    Logon ID: 0x3E7

Group:
    Security ID: S-1-5-32-544
    Group Name: Administrators
    Group Domain: Builtin

Process Information:
    Process ID: 0x1604
    Process Name: C:\Windows\System32\wbem\WmiPrvSE.exe
 
Success Audit9/30/2022 2:00:02 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-18987206-DB1$WORKGROUPS-1-5-32-544AdministratorsBuiltin
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-18
    Account Name: 987206-DB1$
    Account Domain: WORKGROUP
    Logon ID: 0x3E7

Group:
    Security ID: S-1-5-32-544
    Group Name: Administrators
    Group Domain: Builtin

Process Information:
    Process ID: 0x1604
    Process Name: C:\Windows\System32\wbem\WmiPrvSE.exe
 
Success Audit9/30/2022 2:00:01 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-18987206-DB1$WORKGROUPS-1-5-32-544AdministratorsBuiltin
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-18
    Account Name: 987206-DB1$
    Account Domain: WORKGROUP
    Logon ID: 0x3E7

Group:
    Security ID: S-1-5-32-544
    Group Name: Administrators
    Group Domain: Builtin

Process Information:
    Process ID: 0x1604
    Process Name: C:\Windows\System32\wbem\WmiPrvSE.exe
 
Success Audit9/30/2022 2:00:00 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-18987206-DB1$WORKGROUPS-1-5-32-544AdministratorsBuiltin
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-18
    Account Name: 987206-DB1$
    Account Domain: WORKGROUP
    Logon ID: 0x3E7

Group:
    Security ID: S-1-5-32-544
    Group Name: Administrators
    Group Domain: Builtin

Process Information:
    Process ID: 0x1604
    Process Name: C:\Windows\System32\wbem\WmiPrvSE.exe
 
Success Audit9/30/2022 1:57:40 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 1:57:40 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 1:42:40 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 1:42:40 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 1:27:41 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 1:27:41 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 1:12:41 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 1:12:41 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 12:57:41 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 12:57:41 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 12:42:41 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 12:42:41 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 12:27:41 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 12:27:41 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 12:12:41 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/30/2022 12:12:41 AM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 11:57:41 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 11:57:41 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 11:42:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 11:42:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 11:27:41 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 11:27:41 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 11:12:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 11:12:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 10:57:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 10:57:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 10:42:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 10:42:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 10:27:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 10:27:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 10:12:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 10:12:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 9:57:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 9:57:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 9:42:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 9:42:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 9:27:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 9:27:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 9:12:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 9:12:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 8:57:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 8:57:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 8:42:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 8:42:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 8:42:38 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 8:42:38 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 8:42:37 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 8:42:37 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 8:42:32 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 8:42:23 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 8:42:23 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 8:42:22 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 8:42:22 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 8:42:21 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 8:42:21 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 8:42:16 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 8:42:16 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 8:42:16 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 8:42:16 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 8:42:16 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 8:42:16 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 8:42:16 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 8:42:15 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 8:42:15 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 8:42:15 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 8:42:15 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 8:42:15 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 8:41:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 8:41:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 8:26:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 8:26:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 8:11:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 8:11:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 7:56:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 7:56:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 7:55:13 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-18987206-DB1$WORKGROUPS-1-5-32-544AdministratorsBuiltin
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-18
    Account Name: 987206-DB1$
    Account Domain: WORKGROUP
    Logon ID: 0x3E7

Group:
    Security ID: S-1-5-32-544
    Group Name: Administrators
    Group Domain: Builtin

Process Information:
    Process ID: 0x654
    Process Name: C:\Windows\System32\svchost.exe
 
Success Audit9/29/2022 7:41:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 7:41:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 7:26:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 7:26:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 7:11:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 7:11:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 6:56:38 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 6:56:38 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 6:41:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 6:41:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 6:26:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 6:26:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 6:11:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 6:11:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 5:56:38 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 5:56:38 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 5:41:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 5:41:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 5:26:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 5:26:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 5:19:21 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-18987206-DB1$WORKGROUPS-1-5-32-551Backup OperatorsBuiltin
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-18
    Account Name: 987206-DB1$
    Account Domain: WORKGROUP
    Logon ID: 0x3E7

Group:
    Security ID: S-1-5-32-551
    Group Name: Backup Operators
    Group Domain: Builtin

Process Information:
    Process ID: 0x2564
    Process Name: C:\Windows\System32\VSSVC.exe
 
Success Audit9/29/2022 5:19:21 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-18987206-DB1$WORKGROUPS-1-5-32-551Backup OperatorsBuiltin
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-18
    Account Name: 987206-DB1$
    Account Domain: WORKGROUP
    Logon ID: 0x3E7

Group:
    Security ID: S-1-5-32-551
    Group Name: Backup Operators
    Group Domain: Builtin

Process Information:
    Process ID: 0x2564
    Process Name: C:\Windows\System32\VSSVC.exe
 
Success Audit9/29/2022 5:19:21 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-18987206-DB1$WORKGROUPS-1-5-32-544AdministratorsBuiltin
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-18
    Account Name: 987206-DB1$
    Account Domain: WORKGROUP
    Logon ID: 0x3E7

Group:
    Security ID: S-1-5-32-544
    Group Name: Administrators
    Group Domain: Builtin

Process Information:
    Process ID: 0x2564
    Process Name: C:\Windows\System32\VSSVC.exe
 
Success Audit9/29/2022 5:19:21 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-18987206-DB1$WORKGROUPS-1-5-32-544AdministratorsBuiltin
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-18
    Account Name: 987206-DB1$
    Account Domain: WORKGROUP
    Logon ID: 0x3E7

Group:
    Security ID: S-1-5-32-544
    Group Name: Administrators
    Group Domain: Builtin

Process Information:
    Process ID: 0x2564
    Process Name: C:\Windows\System32\VSSVC.exe
 
Success Audit9/29/2022 5:19:18 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-18987206-DB1$WORKGROUPS-1-5-32-551Backup OperatorsBuiltin
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-18
    Account Name: 987206-DB1$
    Account Domain: WORKGROUP
    Logon ID: 0x3E7

Group:
    Security ID: S-1-5-32-551
    Group Name: Backup Operators
    Group Domain: Builtin

Process Information:
    Process ID: 0x2edc
    Process Name: C:\Program Files\Commvault\ContentStore\Base\CLBackup.exe
 
Success Audit9/29/2022 5:19:18 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-18987206-DB1$WORKGROUPS-1-5-32-544AdministratorsBuiltin
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-18
    Account Name: 987206-DB1$
    Account Domain: WORKGROUP
    Logon ID: 0x3E7

Group:
    Security ID: S-1-5-32-544
    Group Name: Administrators
    Group Domain: Builtin

Process Information:
    Process ID: 0x2edc
    Process Name: C:\Program Files\Commvault\ContentStore\Base\CLBackup.exe
 
Success Audit9/29/2022 5:19:18 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-18987206-DB1$WORKGROUPS-1-5-32-551Backup OperatorsBuiltin
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-18
    Account Name: 987206-DB1$
    Account Domain: WORKGROUP
    Logon ID: 0x3E7

Group:
    Security ID: S-1-5-32-551
    Group Name: Backup Operators
    Group Domain: Builtin

Process Information:
    Process ID: 0x2edc
    Process Name: C:\Program Files\Commvault\ContentStore\Base\CLBackup.exe
 
Success Audit9/29/2022 5:19:18 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-18987206-DB1$WORKGROUPS-1-5-32-544AdministratorsBuiltin
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-18
    Account Name: 987206-DB1$
    Account Domain: WORKGROUP
    Logon ID: 0x3E7

Group:
    Security ID: S-1-5-32-544
    Group Name: Administrators
    Group Domain: Builtin

Process Information:
    Process ID: 0x2edc
    Process Name: C:\Program Files\Commvault\ContentStore\Base\CLBackup.exe
 
Success Audit9/29/2022 5:19:17 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-18987206-DB1$WORKGROUPS-1-5-32-551Backup OperatorsBuiltin
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-18
    Account Name: 987206-DB1$
    Account Domain: WORKGROUP
    Logon ID: 0x3E7

Group:
    Security ID: S-1-5-32-551
    Group Name: Backup Operators
    Group Domain: Builtin

Process Information:
    Process ID: 0x2edc
    Process Name: C:\Program Files\Commvault\ContentStore\Base\CLBackup.exe
 
Success Audit9/29/2022 5:19:17 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-18987206-DB1$WORKGROUPS-1-5-32-544AdministratorsBuiltin
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-18
    Account Name: 987206-DB1$
    Account Domain: WORKGROUP
    Logon ID: 0x3E7

Group:
    Security ID: S-1-5-32-544
    Group Name: Administrators
    Group Domain: Builtin

Process Information:
    Process ID: 0x2edc
    Process Name: C:\Program Files\Commvault\ContentStore\Base\CLBackup.exe
 
Success Audit9/29/2022 5:19:15 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-18987206-DB1$WORKGROUPS-1-5-32-551Backup OperatorsBuiltin
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-18
    Account Name: 987206-DB1$
    Account Domain: WORKGROUP
    Logon ID: 0x3E7

Group:
    Security ID: S-1-5-32-551
    Group Name: Backup Operators
    Group Domain: Builtin

Process Information:
    Process ID: 0x2edc
    Process Name: C:\Program Files\Commvault\ContentStore\Base\CLBackup.exe
 
Success Audit9/29/2022 5:19:15 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-18987206-DB1$WORKGROUPS-1-5-32-544AdministratorsBuiltin
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-18
    Account Name: 987206-DB1$
    Account Domain: WORKGROUP
    Logon ID: 0x3E7

Group:
    Security ID: S-1-5-32-544
    Group Name: Administrators
    Group Domain: Builtin

Process Information:
    Process ID: 0x2edc
    Process Name: C:\Program Files\Commvault\ContentStore\Base\CLBackup.exe
 
Success Audit9/29/2022 5:19:15 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-18987206-DB1$WORKGROUPS-1-5-32-551Backup OperatorsBuiltin
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-18
    Account Name: 987206-DB1$
    Account Domain: WORKGROUP
    Logon ID: 0x3E7

Group:
    Security ID: S-1-5-32-551
    Group Name: Backup Operators
    Group Domain: Builtin

Process Information:
    Process ID: 0x2edc
    Process Name: C:\Program Files\Commvault\ContentStore\Base\CLBackup.exe
 
Success Audit9/29/2022 5:19:15 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-18987206-DB1$WORKGROUPS-1-5-32-551Backup OperatorsBuiltin
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-18
    Account Name: 987206-DB1$
    Account Domain: WORKGROUP
    Logon ID: 0x3E7

Group:
    Security ID: S-1-5-32-551
    Group Name: Backup Operators
    Group Domain: Builtin

Process Information:
    Process ID: 0x2edc
    Process Name: C:\Program Files\Commvault\ContentStore\Base\CLBackup.exe
 
Success Audit9/29/2022 5:19:15 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-18987206-DB1$WORKGROUPS-1-5-32-544AdministratorsBuiltin
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-18
    Account Name: 987206-DB1$
    Account Domain: WORKGROUP
    Logon ID: 0x3E7

Group:
    Security ID: S-1-5-32-544
    Group Name: Administrators
    Group Domain: Builtin

Process Information:
    Process ID: 0x2edc
    Process Name: C:\Program Files\Commvault\ContentStore\Base\CLBackup.exe
 
Success Audit9/29/2022 5:19:15 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-18987206-DB1$WORKGROUPS-1-5-32-544AdministratorsBuiltin
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-18
    Account Name: 987206-DB1$
    Account Domain: WORKGROUP
    Logon ID: 0x3E7

Group:
    Security ID: S-1-5-32-544
    Group Name: Administrators
    Group Domain: Builtin

Process Information:
    Process ID: 0x2edc
    Process Name: C:\Program Files\Commvault\ContentStore\Base\CLBackup.exe
 
Success Audit9/29/2022 5:19:15 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-18987206-DB1$WORKGROUPS-1-5-32-551Backup OperatorsBuiltin
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-18
    Account Name: 987206-DB1$
    Account Domain: WORKGROUP
    Logon ID: 0x3E7

Group:
    Security ID: S-1-5-32-551
    Group Name: Backup Operators
    Group Domain: Builtin

Process Information:
    Process ID: 0x2edc
    Process Name: C:\Program Files\Commvault\ContentStore\Base\CLBackup.exe
 
Success Audit9/29/2022 5:19:15 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-18987206-DB1$WORKGROUPS-1-5-32-551Backup OperatorsBuiltin
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-18
    Account Name: 987206-DB1$
    Account Domain: WORKGROUP
    Logon ID: 0x3E7

Group:
    Security ID: S-1-5-32-551
    Group Name: Backup Operators
    Group Domain: Builtin

Process Information:
    Process ID: 0x2edc
    Process Name: C:\Program Files\Commvault\ContentStore\Base\CLBackup.exe
 
Success Audit9/29/2022 5:19:15 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-18987206-DB1$WORKGROUPS-1-5-32-544AdministratorsBuiltin
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-18
    Account Name: 987206-DB1$
    Account Domain: WORKGROUP
    Logon ID: 0x3E7

Group:
    Security ID: S-1-5-32-544
    Group Name: Administrators
    Group Domain: Builtin

Process Information:
    Process ID: 0x2edc
    Process Name: C:\Program Files\Commvault\ContentStore\Base\CLBackup.exe
 
Success Audit9/29/2022 5:19:15 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-18987206-DB1$WORKGROUPS-1-5-32-544AdministratorsBuiltin
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-18
    Account Name: 987206-DB1$
    Account Domain: WORKGROUP
    Logon ID: 0x3E7

Group:
    Security ID: S-1-5-32-544
    Group Name: Administrators
    Group Domain: Builtin

Process Information:
    Process ID: 0x2edc
    Process Name: C:\Program Files\Commvault\ContentStore\Base\CLBackup.exe
 
Success Audit9/29/2022 5:19:15 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-18987206-DB1$WORKGROUPS-1-5-32-551Backup OperatorsBuiltin
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-18
    Account Name: 987206-DB1$
    Account Domain: WORKGROUP
    Logon ID: 0x3E7

Group:
    Security ID: S-1-5-32-551
    Group Name: Backup Operators
    Group Domain: Builtin

Process Information:
    Process ID: 0x2edc
    Process Name: C:\Program Files\Commvault\ContentStore\Base\CLBackup.exe
 
Success Audit9/29/2022 5:19:15 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-18987206-DB1$WORKGROUPS-1-5-32-551Backup OperatorsBuiltin
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-18
    Account Name: 987206-DB1$
    Account Domain: WORKGROUP
    Logon ID: 0x3E7

Group:
    Security ID: S-1-5-32-551
    Group Name: Backup Operators
    Group Domain: Builtin

Process Information:
    Process ID: 0x2edc
    Process Name: C:\Program Files\Commvault\ContentStore\Base\CLBackup.exe
 
Success Audit9/29/2022 5:19:15 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-18987206-DB1$WORKGROUPS-1-5-32-544AdministratorsBuiltin
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-18
    Account Name: 987206-DB1$
    Account Domain: WORKGROUP
    Logon ID: 0x3E7

Group:
    Security ID: S-1-5-32-544
    Group Name: Administrators
    Group Domain: Builtin

Process Information:
    Process ID: 0x2edc
    Process Name: C:\Program Files\Commvault\ContentStore\Base\CLBackup.exe
 
Success Audit9/29/2022 5:19:15 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-18987206-DB1$WORKGROUPS-1-5-32-544AdministratorsBuiltin
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-18
    Account Name: 987206-DB1$
    Account Domain: WORKGROUP
    Logon ID: 0x3E7

Group:
    Security ID: S-1-5-32-544
    Group Name: Administrators
    Group Domain: Builtin

Process Information:
    Process ID: 0x2edc
    Process Name: C:\Program Files\Commvault\ContentStore\Base\CLBackup.exe
 
Success Audit9/29/2022 5:19:15 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-18987206-DB1$WORKGROUPS-1-5-32-551Backup OperatorsBuiltin
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-18
    Account Name: 987206-DB1$
    Account Domain: WORKGROUP
    Logon ID: 0x3E7

Group:
    Security ID: S-1-5-32-551
    Group Name: Backup Operators
    Group Domain: Builtin

Process Information:
    Process ID: 0x2edc
    Process Name: C:\Program Files\Commvault\ContentStore\Base\CLBackup.exe
 
Success Audit9/29/2022 5:19:15 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-18987206-DB1$WORKGROUPS-1-5-32-544AdministratorsBuiltin
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-18
    Account Name: 987206-DB1$
    Account Domain: WORKGROUP
    Logon ID: 0x3E7

Group:
    Security ID: S-1-5-32-544
    Group Name: Administrators
    Group Domain: Builtin

Process Information:
    Process ID: 0x2edc
    Process Name: C:\Program Files\Commvault\ContentStore\Base\CLBackup.exe
 
Success Audit9/29/2022 5:19:15 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-18987206-DB1$WORKGROUPS-1-5-32-551Backup OperatorsBuiltin
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-18
    Account Name: 987206-DB1$
    Account Domain: WORKGROUP
    Logon ID: 0x3E7

Group:
    Security ID: S-1-5-32-551
    Group Name: Backup Operators
    Group Domain: Builtin

Process Information:
    Process ID: 0x2edc
    Process Name: C:\Program Files\Commvault\ContentStore\Base\CLBackup.exe
 
Success Audit9/29/2022 5:19:15 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-18987206-DB1$WORKGROUPS-1-5-32-544AdministratorsBuiltin
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-18
    Account Name: 987206-DB1$
    Account Domain: WORKGROUP
    Logon ID: 0x3E7

Group:
    Security ID: S-1-5-32-544
    Group Name: Administrators
    Group Domain: Builtin

Process Information:
    Process ID: 0x2edc
    Process Name: C:\Program Files\Commvault\ContentStore\Base\CLBackup.exe
 
Success Audit9/29/2022 5:19:15 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-18987206-DB1$WORKGROUPS-1-5-32-551Backup OperatorsBuiltin
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-18
    Account Name: 987206-DB1$
    Account Domain: WORKGROUP
    Logon ID: 0x3E7

Group:
    Security ID: S-1-5-32-551
    Group Name: Backup Operators
    Group Domain: Builtin

Process Information:
    Process ID: 0x2edc
    Process Name: C:\Program Files\Commvault\ContentStore\Base\CLBackup.exe
 
Success Audit9/29/2022 5:19:15 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-18987206-DB1$WORKGROUPS-1-5-32-544AdministratorsBuiltin
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-18
    Account Name: 987206-DB1$
    Account Domain: WORKGROUP
    Logon ID: 0x3E7

Group:
    Security ID: S-1-5-32-544
    Group Name: Administrators
    Group Domain: Builtin

Process Information:
    Process ID: 0x2edc
    Process Name: C:\Program Files\Commvault\ContentStore\Base\CLBackup.exe
 
Success Audit9/29/2022 5:19:15 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-18987206-DB1$WORKGROUPS-1-5-32-551Backup OperatorsBuiltin
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-18
    Account Name: 987206-DB1$
    Account Domain: WORKGROUP
    Logon ID: 0x3E7

Group:
    Security ID: S-1-5-32-551
    Group Name: Backup Operators
    Group Domain: Builtin

Process Information:
    Process ID: 0x2564
    Process Name: C:\Windows\System32\VSSVC.exe
 
Success Audit9/29/2022 5:19:15 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-18987206-DB1$WORKGROUPS-1-5-32-544AdministratorsBuiltin
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-18
    Account Name: 987206-DB1$
    Account Domain: WORKGROUP
    Logon ID: 0x3E7

Group:
    Security ID: S-1-5-32-544
    Group Name: Administrators
    Group Domain: Builtin

Process Information:
    Process ID: 0x2564
    Process Name: C:\Windows\System32\VSSVC.exe
 
Success Audit9/29/2022 5:19:15 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-18987206-DB1$WORKGROUPS-1-5-32-551Backup OperatorsBuiltin
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-18
    Account Name: 987206-DB1$
    Account Domain: WORKGROUP
    Logon ID: 0x3E7

Group:
    Security ID: S-1-5-32-551
    Group Name: Backup Operators
    Group Domain: Builtin

Process Information:
    Process ID: 0x2564
    Process Name: C:\Windows\System32\VSSVC.exe
 
Success Audit9/29/2022 5:19:15 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-18987206-DB1$WORKGROUPS-1-5-32-544AdministratorsBuiltin
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-18
    Account Name: 987206-DB1$
    Account Domain: WORKGROUP
    Logon ID: 0x3E7

Group:
    Security ID: S-1-5-32-544
    Group Name: Administrators
    Group Domain: Builtin

Process Information:
    Process ID: 0x2564
    Process Name: C:\Windows\System32\VSSVC.exe
 
Success Audit9/29/2022 5:19:15 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-18987206-DB1$WORKGROUPS-1-5-32-551Backup OperatorsBuiltin
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-18
    Account Name: 987206-DB1$
    Account Domain: WORKGROUP
    Logon ID: 0x3E7

Group:
    Security ID: S-1-5-32-551
    Group Name: Backup Operators
    Group Domain: Builtin

Process Information:
    Process ID: 0x2564
    Process Name: C:\Windows\System32\VSSVC.exe
 
Success Audit9/29/2022 5:19:15 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-18987206-DB1$WORKGROUPS-1-5-32-544AdministratorsBuiltin
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-18
    Account Name: 987206-DB1$
    Account Domain: WORKGROUP
    Logon ID: 0x3E7

Group:
    Security ID: S-1-5-32-544
    Group Name: Administrators
    Group Domain: Builtin

Process Information:
    Process ID: 0x2564
    Process Name: C:\Windows\System32\VSSVC.exe
 
Success Audit9/29/2022 5:19:15 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-18987206-DB1$WORKGROUPS-1-5-32-551Backup OperatorsBuiltin
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-18
    Account Name: 987206-DB1$
    Account Domain: WORKGROUP
    Logon ID: 0x3E7

Group:
    Security ID: S-1-5-32-551
    Group Name: Backup Operators
    Group Domain: Builtin

Process Information:
    Process ID: 0x2564
    Process Name: C:\Windows\System32\VSSVC.exe
 
Success Audit9/29/2022 5:19:15 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-18987206-DB1$WORKGROUPS-1-5-32-544AdministratorsBuiltin
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-18
    Account Name: 987206-DB1$
    Account Domain: WORKGROUP
    Logon ID: 0x3E7

Group:
    Security ID: S-1-5-32-544
    Group Name: Administrators
    Group Domain: Builtin

Process Information:
    Process ID: 0x2564
    Process Name: C:\Windows\System32\VSSVC.exe
 
Success Audit9/29/2022 5:11:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 5:11:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 4:56:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 4:56:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 4:41:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 4:41:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 4:26:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 4:26:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 4:11:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 4:11:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 3:56:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 3:56:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 3:41:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 3:41:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 3:26:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 3:26:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 3:11:38 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 3:11:38 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 2:56:38 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 2:56:38 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 2:41:38 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 2:41:38 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 2:26:38 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 2:26:38 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 2:11:38 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 2:11:38 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 1:56:38 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 1:56:38 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 1:41:38 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 1:41:38 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 1:26:38 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 1:26:38 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 1:26:20 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-18987206-DB1$WORKGROUPS-1-5-32-544AdministratorsBuiltin
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-18
    Account Name: 987206-DB1$
    Account Domain: WORKGROUP
    Logon ID: 0x3E7

Group:
    Security ID: S-1-5-32-544
    Group Name: Administrators
    Group Domain: Builtin

Process Information:
    Process ID: 0x654
    Process Name: C:\Windows\System32\svchost.exe
 
Success Audit9/29/2022 1:11:38 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 1:11:38 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:56:38 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:56:38 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:41:38 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:41:38 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:41:36 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:41:36 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:41:35 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:41:35 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:49 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:49 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:47 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:47 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:45 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:45 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:41 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:41 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:41 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:41 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:41 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:41 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:40 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Group:
    Security ID: S-1-5-21-1214278821-4157316683-475226137-1007
    Group Name: SophosAdministrator
    Group Domain: 987206-DB1

Process Information:
    Process ID: 0x8bc
    Process Name: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
 
Success Audit9/29/2022 12:36:39 PM987206-db14799A security-enabled local group membership was enumerated.S-1-5-19LOCAL SERVICENT AUTHORITYS-1-5-21-1214278821-4157316683-475226137-1007SophosAdministrator987206-DB1
A security-enabled local group membership was enumerated.

Subject:
    Security ID: S-1-5-19
    Account Name: LOCAL SERVICE
    Account Domain: NT AUTHORITY
    Logon ID: 0x3E5

Gr