Comment on page
Create Account
Persistence
attacker@victim
net user test test123 /add /domain
commandline arguments
There is a whole range of interesting events that could be monitored related to new account creation:
Details for the newly added account are logged as event
4720 :
Last modified 5yr ago