Skip to content

Hide Navigation Hide TOC

FortiGate - New Local User Created (ddbbe845-1d74-43a8-8231-2156d180234d)

Detects the creation of a new local user on a Fortinet FortiGate Firewall. The new local user could be used for VPN connections.

Cluster A Galaxy A Cluster B Galaxy B Level
Local Account - T1136.001 (635cbe30-392d-4e27-978e-66774357c762) Attack Pattern FortiGate - New Local User Created (ddbbe845-1d74-43a8-8231-2156d180234d) Sigma-Rules 1
Local Account - T1136.001 (635cbe30-392d-4e27-978e-66774357c762) Attack Pattern Create Account - T1136 (e01be9c5-e763-4caf-aeb7-000b416aef67) Attack Pattern 2