The changes are reported with the Unknown value in the Who Changed column for SharePoint

The following changes are reported with the Unknown value in the Who Changed column:

• Automatic creation of SharePoint groups on site creation if it uses unique permissions instead of inheriting them
• All changes made by the Anonymous user if the security policy permits such changes