Hello,
Has anyone ran into an issue where the AppLocker data from Splunk logs is showing the SID information instead of the userID? Any help on how to fix this would be greatly appreciated!