Skip to content
Threat Feed
Subscribe

Tag

Adsi

1 brief RSS
medium advisory

Detection of Stealthy User Account Creation via ADSI

Adversaries may use Active Directory Service Interfaces (ADSI) within PowerShell to create local or domain accounts, effectively bypassing standard monitoring for typical user-creation commands.

persistence windows powershell adsi detection-engineering
1r 2t