The removal of a user, service, or machine account from an operating system, cloud identity management system, or directory service.
| Name | Channel |
|---|---|
| esxi:hostd | method=RemoveUser or esxcli system account remove invocation |
| m365:unified | Remove-Mailbox, Set-Mailbox |
| WinEventLog:Security | EventCode=4726, 4657 |