Root Account Enable Via Dsenableroot (821bcf4d-46c7-4b87-bc57-9509d3ba7c11)

Detects attempts to enable the root account via "dsenableroot"

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Local Accounts - T1078.003 (fdc47f44-dd32-4b99-af5f-209f556f63c2)	Attack Pattern	Root Account Enable Via Dsenableroot (821bcf4d-46c7-4b87-bc57-9509d3ba7c11)	Sigma-Rules	1
Valid Accounts - T1078 (b17a1a56-e99c-403c-8948-561df0cffe81)	Attack Pattern	Root Account Enable Via Dsenableroot (821bcf4d-46c7-4b87-bc57-9509d3ba7c11)	Sigma-Rules	1
Default Accounts - T1078.001 (6151cbea-819b-455a-9fa6-99a1cc58797d)	Attack Pattern	Root Account Enable Via Dsenableroot (821bcf4d-46c7-4b87-bc57-9509d3ba7c11)	Sigma-Rules	1
Local Accounts - T1078.003 (fdc47f44-dd32-4b99-af5f-209f556f63c2)	Attack Pattern	Valid Accounts - T1078 (b17a1a56-e99c-403c-8948-561df0cffe81)	Attack Pattern	2
Valid Accounts - T1078 (b17a1a56-e99c-403c-8948-561df0cffe81)	Attack Pattern	Default Accounts - T1078.001 (6151cbea-819b-455a-9fa6-99a1cc58797d)	Attack Pattern	2