SharePoint Audit Log Event ID 25
25: SharePoint group created
This is an event from
SharePoint
audit event from
LOGbinder SP
generated by
.
On this page
SharePoint allows you to create application groups local to SharePoint. We recommend using AD groups instead. Regardless, this event documents when a SharePoint group is created. This event is just as important as 27 (member added) since you can specify initial members at the time of group creation.
Free Security Log Resources by Randy
- Occurred: this is the date and time when SharePoint recorded the event to the internal SharePoint audit log and may be earlier than the date/time in the header of this event which reflects when LOGbinder SP wrote the event to Windows event log
- Site: This is the URL of the site generating this event
- User: name of the user who performed the action
- Group
- ID: internal ID within SharePoint for the group
- Name: display name of the group
- Initial members: members initially added to group
Setup PowerShell Audit Log Forwarding in 4 Minutes
This Event Is Produced By
Which Integrates with Your SIEM