Question

Charles wants to review his windows logs for new account creations. what windows log should he check

Answer 1

Security ID [Type = SID]: SID of created user account. Event Viewer automatically tries to resolve SIDs and show the account name.