Siem detection and alerting help

Where do I find the security identifier for the admin account? I have finished the lab and have the rest of the answers.
Thanks

It is not matching the hint.

Hey there - the Subject User SID is not the value we’re looking for. You’ll want the value in the field “Security ID” as shown below.

1 Like