I have a SQL instance, where I have disabled the SA login.
However, I ran a query to review login activity, and it shows the SA login with SID 0x01 connecting to Mas