splunk-security_content/lookups/builtin_groups_lookup.csv

1	builtin_group_string	builtin_group_name
2	AO	Account operators
3	RU	Alias to allow previous Windows 2000
4	AN	Anonymous logon
5	AU	Authenticated users
6	BA	Built-in administrators
7	BG	Built-in guests
8	BO	Backup operators
9	BU	Built-in users
10	CA	Certificate server administrators
11	CG	Creator group
12	CO	Creator owner
13	DA	Domain administrators
14	DC	Domain computers
15	DD	Domain controllers
16	DG	Domain guests
17	DU	Domain users
18	EA	Enterprise administrators
19	ED	Enterprise domain controllers
20	WD	Everyone
21	PA	Group Policy administrators
22	IU	Interactively logged-on user
23	LA	Local administrator
24	LG	Local guest
25	LS	Local service account
26	SY	Local system
27	NU	Network sign-in user
28	NO	Network configuration operators
29	NS	Network service account
30	PO	Printer operators
31	PS	Personal self
32	PU	Power users
33	RS	RAS servers group
34	RD	Terminal server users
35	RE	Replicator
36	RC	Restricted code
37	SA	Schema administrators
38	SO	Server operators
39	SU	Service sign-in user