mirror of
https://github.com/splunk/security_content
synced 2026-06-08 17:32:49 +00:00
Eric McGinnis
51 lines
1.1 KiB
CSV
51 lines
1.1 KiB
CSV
builtin_group_string,builtin_group_name
|
|
AA,Access control assistant operators
|
|
AN,Anonymous logon
|
|
AO,Account operators
|
|
AP,Protected users
|
|
AU,Authenticated users
|
|
BA,Built-in administrators
|
|
BG,Built-in guests
|
|
BO,Backup operators
|
|
BU,Built-in users
|
|
CA,Certificate server administrators
|
|
CG,Creator group
|
|
CO,Creator owner
|
|
CY,Crypto operators
|
|
DA,Domain administrators
|
|
DC,Domain computers
|
|
DD,Domain controllers
|
|
DG,Domain guests
|
|
DU,Domain users
|
|
EA,Enterprise administrators
|
|
ED,Enterprise domain controllers
|
|
ER,Eventlog readers
|
|
ES,Endpoint servers
|
|
HA,Hyper-V administrators
|
|
IS,Anonymous internet users
|
|
IU,Interactively logged-on user
|
|
KA,Domain key administrators
|
|
LA,Local administrator
|
|
LG,Local guest
|
|
LS,Local service account
|
|
LU,Performance log users
|
|
MS,Management servers
|
|
MU,Performance monitor users
|
|
NO,Network configuration operators
|
|
NS,Network service account
|
|
NU,Network sign-in user
|
|
PA,Group Policy administrators
|
|
PO,Printer operators
|
|
PS,Personal self
|
|
PU,Power users
|
|
RC,Restricted code
|
|
RD,Terminal server users
|
|
RE,Replicator
|
|
RS,RAS servers group
|
|
RU,Alias to allow previous Windows 2000
|
|
SA,Schema administrators
|
|
SO,Server operators
|
|
SU,Service sign-in user
|
|
SY,Local system
|
|
WD,Everyone
|