CmdID

CmdID / Techniques

T1136 Create Account

Adversaries may create an account to maintain access to victim systems. MITRE ATT&CK

1 Sigma rule T1136 on attack.mitre.org

Its sub-techniques

MITRE ATT&CK
T1136.001Create Account: Local Account
T1136.002Create Account: Domain Account

Sigma rules tagged with it

process creation, the highest levels first
mediumESXi Account Creation Via ESXCLICedric Maurugeon · Linux