This value is always the SID of the system user for this event.

• 对于此事件,此值始终为系统用户的SID。