Skip to content

Reconnaissance

Windows Event ID 4798: A user's local group membership was enumerated

July 3, 2026

Windows Event ID 4799: A security-enabled local group membership was enumerated

July 3, 2026