CmdID

CmdID / Techniques / T1136

T1136.002 Create Account: Domain Account

Adversaries may create a domain account to maintain access to victim systems. MITRE ATT&CK

1 Sigma rule T1136.002 on attack.mitre.org

Part of

MITRE ATT&CK

T1136Create Account

Sigma rules tagged with it

process creation, the highest levels first

mediumNew User Account Creation Attempt Via ADSI in CommandLineWilliam Gokah (idea), Raylee Hawkins, Swachchhanda Shrawan Poudel (Nextron Systems) · Windows