Guest Account Enabled Via Sysadminctl (d7329412-13bd-44ba-a072-3387f804a106)

Detects attempts to enable the guest account using the sysadminctl utility

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Valid Accounts - T1078 (b17a1a56-e99c-403c-8948-561df0cffe81)	Attack Pattern	Guest Account Enabled Via Sysadminctl (d7329412-13bd-44ba-a072-3387f804a106)	Sigma-Rules	1
Guest Account Enabled Via Sysadminctl (d7329412-13bd-44ba-a072-3387f804a106)	Sigma-Rules	Default Accounts - T1078.001 (6151cbea-819b-455a-9fa6-99a1cc58797d)	Attack Pattern	1
Valid Accounts - T1078 (b17a1a56-e99c-403c-8948-561df0cffe81)	Attack Pattern	Default Accounts - T1078.001 (6151cbea-819b-455a-9fa6-99a1cc58797d)	Attack Pattern	2