CmdID

CmdID / PowerShell / Cmdlets / New

New-ADServiceAccount

Creates a new Active Directory managed service account or group managed service account object. Windows Server PowerShell reference

From the Windows Server PowerShell reference 32 parameters 1 Sigma rule looks for it Its page in the reference

Opens CmdID with your command, read as PowerShell. It is read in your browser and sent nowhere.

Parameters

32 in the Windows Server PowerShell reference
Show its 32 parameters
-AccountExpirationDateSpecifies the expiration date for an account.
-AccountNotDelegatedIndicates whether the security context of the user is delegated to a service.
-AccountPasswordSpecifies a new password value for the service account.
-AuthenticationPolicySpecifies an Active Directory Domain Services authentication policy object.
-AuthenticationPolicySiloSpecifies an Active Directory Domain Services authentication policy silo object.
-AuthTypeSpecifies the authentication method to use.
-CertificatesSpecifies an array of certificates.
-CompoundIdentitySupportedIndicates whether an account supports Kerberos service tickets which includes the authorization data for the user's device.
-Confirm, -cfPrompts you for confirmation before running the cmdlet.
-CredentialSpecifies the service account credentials to use to perform this task.
-DescriptionSpecifies a description of the object.
-DisplayNameSpecifies the display name of the object.
-DNSHostNameSpecifies the DNS host name of Service Account.
-EnabledIndicates whether an account is enabled.
-HomePageSpecifies the URL of the home page of the object.
-InstanceSpecifies an instance of a service account object to use as a template for a new service account object.
-KerberosEncryptionTypeIndicates whether an account supports Kerberos encryption types which are used during creation of service tickets.
-ManagedPasswordIntervalInDaysSpecifies the number of days for the password change interval.
-NameSpecifies the name of the object.
-OtherAttributesSpecifies object attribute values for attributes that aren't represented by cmdlet parameters.
-PassThruReturns an object representing the item with which you're working.
-PathSpecifies the X.500 path of the organizational unit (OU) or container where the new object is created.
-PrincipalsAllowedToDelegateToAccountSpecifies the accounts that can act on the behalf of users to services running as this managed service account or group-managed service account.
-PrincipalsAllowedToRetrieveManagedPasswordSpecifies the membership policy for systems that can use a group-managed service account.
-RestrictToOutboundAuthenticationOnlyIndicates that the cmdlet creates a group-managed service account that on success can be used by a service for successful outbound authentication requests only.
-RestrictToSingleComputerIndicates that the cmdlet creates a managed service account that can be used only for a single computer.
-CreateDelegatedServiceAccountIndicates that the cmdlet creates a delegated managed service account that be used for migration.
-SamAccountNameSpecifies the Security Account Manager (SAM) account name of the user, group, computer, or service account.
-ServerSpecifies the Active Directory Domain Services (AD DS) instance to connect to, by providing one of the following values for a corresponding domain name or directory server.
-ServicePrincipalNamesSpecifies the service principal names for the account.
-TrustedForDelegationIndicates whether an account is trusted for Kerberos delegation.
-WhatIf, -wiShows what would happen if the cmdlet runs.

What looks for it

Sigma process creation rules that name New-ADServiceAccount
mediumNew DMSA Service Account Created in Specific OUsSwachchhanda Shrawan Poudel (Nextron Systems)