| skipped 897 lines |
898 | 898 | | # EventID 4719: System audit policy was changed |
899 | 899 | | ### |
900 | 900 | | elif eventid == 4719: |
| 901 | + | guid = '' |
901 | 902 | | for data in event_data: |
902 | 903 | | if data.get("Name") in "SubjectUserName" and data.text is not None and not re.search(UCHECK, data.text): |
903 | 904 | | username = data.text.split("@")[0] |
| skipped 957 lines |