VQL Reference Windows lookupSID lookupSID Function Arg Description Type sid A SID to lookup using LookupAccountSid string (required) Required permissions: MACHINE_STATE Description Get information about the SID.