SID

A SID is the unique, immutable value Windows uses internally to identify a user, group, or computer account. Access checks compare the SIDs in a user's token against the SIDs in a resource's ACL, so renaming an account changes nothing about its access. Attackers abuse SID history injection to smuggle privileges across domains.