u/Positive-Sir-3789

This just started today, but we have endpoints now that are showing up as base64 characters, they don't even decode to the same of the endpoint either. Just wondering if anyone else is experiencing this in their visibility queries?

Hello, we have a visibility query that displays any of a group of users that login to machines, but is it possible to identify the users logging in based on one of the key administrator SIDs, e.g., local or domain admin groups?