Navigation :
New User Account Created On Multiple Hosts
Description
Alerts when numerous new accounts are created for a username accounts multiple hosts.
Content Mapping
This content is not mapped to any local saved search. Add mapping
Use Case
Security Monitoring
Category
Lateral Movement, Endpoint Compromise
Alert Volume
Alerts when numerous new accounts are created for a username accounts multiple hosts.
SPL Difficulty
Advanced
Journey
Stage 4
MITRE ATT&CK Tactics
Persistence
MITRE ATT&CK Techniques
Valid Accounts
Create Account
MITRE Threat Groups
APT18
APT28
APT33
APT39
APT41
Carbanak
Chimera
Dragonfly 2.0
FIN10
FIN4
FIN5
FIN6
FIN8
Leviathan
Night Dragon
OilRig
PittyTiger
Sandworm Team
Silence
Soft Cell
Suckfly
TEMP.Veles
Threat Group-3390
Wizard Spider
menuPass
Data Sources
User Activity Audit
Windows Security