Where do I get a list of Subject Logon Id codes and meanings?

Question

I need to know the means of these codes:

source=Prod/Windows/Events/Local

SubjectLogonId:"0x3e7"

Answer 1

The Subject Logon ID codes and meanings are not listed in the provided context. However, the context does provide information on Logon events and Logon types. The SubjectLogonId code "0x3e7" corresponds to the Local System account, which is a built-in account with extensive privileges.

---

References:

• Audit logon events
• Security identifiers - Well-known SIDs