#event-id-4764

1 article

Windows Events1

Windows Security Event Viewer displaying Event ID 4764 group membership changes on a SOC monitoring dashboard

Event 4764

Microsoft-Windows-Security-Auditing

Windows EventInformation

Windows Event ID 4764 – Microsoft-Windows-Security-Auditing: Group Member Added

Event ID 4764 logs when a user account is added to a security-enabled group in Active Directory or local system, providing audit trail for group membership changes.

March 1812 min