Event ID
Source
Category
Message
16980
Microsoft-Windows-Directory-Services-SAM
There is no message from the SIEM logs I'm seeing from. Fields unique to this Event ID (Kibana Discover): winlog.event_data.AccountDN winlog.event_data.AccountSID winlog.event_data.KeyHash