Jeffery Hicks translates security identifiers:
As usually happens during my day, I get sidetracked to another issue, and before you know it, I have a new PowerShell tool. In this instance, I was looking at event logs using Get-WinEvent. One of the event record properties is a UserID.
That’s very nice, but who is this? In this particular instance, the UserID property is SecurityIdentifier object.
Read on to see how to translate a SecurityIdentifier into something human-understandable.