Windows EventInformation
Windows Event ID 4727 – Microsoft-Windows-Security-Auditing: Security-Enabled Global Group Created
Event ID 4727 fires when a security-enabled global group is created in Active Directory. This audit event tracks group creation activities for security monitoring and compliance purposes.
