Skip to content

Hide Navigation Hide TOC

Creation Of A Local User Account (51719bf5-e4fd-4e44-8ba8-b830e7ac0731)

Detects the creation of a new user account. Such accounts may be used for persistence that do not require persistent remote access tools to be deployed on the system.

Cluster A Galaxy A Cluster B Galaxy B Level
Local Account - T1136.001 (635cbe30-392d-4e27-978e-66774357c762) Attack Pattern Creation Of A Local User Account (51719bf5-e4fd-4e44-8ba8-b830e7ac0731) Sigma-Rules 1
Local Account - T1136.001 (635cbe30-392d-4e27-978e-66774357c762) Attack Pattern Create Account - T1136 (e01be9c5-e763-4caf-aeb7-000b416aef67) Attack Pattern 2