Create local admin accounts using net.exe
This search looks for the creation of local administrator accounts using net.exe.
This content is not mapped to any local saved search. Add mapping
Create local admin accounts using net.exe Help
Net.exe is a built-in Windows command-line tool that can be used to add, display, or modify user accounts. While Microsoft administrators use this tool to manage user groups, threat actors often leverage it to create local admin accounts to maintain persistence. In this search, we are looking for the execution of process net.exe with command-line parameters such as