Técnica MITRE ATT&CK · Persistencia

`T1136.002` Domain Account

Adversaries may create a domain account to maintain access to victim systems. Domain accounts are those managed by Active Directory Domain Services where access and permissions are configured across systems and services that are part of that domain. Domain accounts can cover user, administrator, and service accounts. With a sufficient level of access, the net user /add /domain command can be…

Ficha en MITRE ATT&CK ↗

Quién la usa · con noticias en Jábega

HAFNIUM

Reglas Sigma para cazarla

PSEXEC Remote Execution File Artefacthightest · windows
Suspicious Windows ANONYMOUS LOGON Local Account Createdhightest · windows
Manipulation of User Computer or Group Security Principals Across ADmediumtest · windows

Reglas de SigmaHQ · Detection Rule License 1.1. Técnica de MITRE ATT&CK®.