User Added to Local Administrator Group (c265cf08-3f99-46c1-8d59-328247057d57)
Detects the addition of a new member to the local administrator group, which could be legitimate activity or a sign of privilege escalation activity
Detects the addition of a new member to the local administrator group, which could be legitimate activity or a sign of privilege escalation activity