Event ID 635

Security Enabled Local Group Created:
    New Account Name:   %1
    New Domain: %2
    New Account ID: %3
    Caller User Name:   %4
    Caller Domain:  %5
    Caller Logon ID:    %6
    Privileges: %7
 Attributes:
    Sam Account Name:   %8
    Sid History:    %9