Update PowerShellCore-Operational_PowerShellCore_4104.map

EricZimmerman · May 2, 2023 · 466537c · 466537c
1 parent d8d059c
commit 466537c
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/evtx/Maps/PowerShellCore-Operational_PowerShellCore_4104.map b/evtx/Maps/PowerShellCore-Operational_PowerShellCore_4104.map
@@ -38,7 +38,7 @@ Maps:
 #     <Execution ProcessID="35496" ThreadID="99876" />
 #     <Channel>PowerShellCore/Operational</Channel>
 #     <Computer>HOSTNAME</Computer>
-#     <Security UserID="S-1-5-21-3735441246-2017897385-317953719-1001" />
+#     <Security UserID="S-1-5-21-3735441246-2011234385-317123419-1001" />
 #   </System>
 #   <EventData>
 #     <Data Name="MessageNumber">1</Data>