Windows · xml
Windows Security 4732 — Member added to local security group
A member was added to a security-enabled local group.
Log sources tagged privilege. Browse source profiles associated with privilege.
Windows · xml
A member was added to a security-enabled local group.
Linux · syslog
sudo can record attempted privilege transitions and command context through syslog or its configured logs.