How to get user name instead of SID during WMI logcollection

Question

I'm looking for a possible solution to convert a Windows user SID to a username.

I am running WQL queries against some local namespace and would like to know if there are any possibilities to get a username instead SID like an event viewer. I am using WBEMTest for testing.

Screenshot for reference.

Answer 1

SELECT * FROM Win32_AccountSID should get you a list you can match the SID to the name.