Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:microsoft:configuration_manager_2503:-:*:*:*:*:*:*:*

1 brief RSS
high advisory

Detection of Renaming Windows Built-in Accounts

Adversaries rename high-privileged Windows built-in accounts to evade security monitoring while maintaining access associated with reserved RIDs 500-504.

Windows persistence defense-evasion
1r 2t 1c