Bug fix: New Local Admin Account

[Yunagi]

First let me say that I really like the Security Essentials app since it is less complex and more lightweighted than the Enterprise Security app. I hope the Security Esssentials app will still receive updates in the future.

Is there a way to report bugs?

I found the following bug: When opening "Live Data" of "New Local Admin Account" and then clicking on "Open in Search" next to "Must have Local Account Management Logs (Event ID 4720)", then the underlying search specifies the Event ID 4726 instead of 4720. This check wrongly fails on my system.

[David · Accepted solution]

Great catch! I just fixed it in my dev environment.

We're definitely going to keep updating Splunk Security Essentials.. in fact we're working on a big development right now! Look for an overhaul (while not losing any of the existing features or functionality!) in the next month or so!

[Yunagi]

I'm looking forward to it!