Skip to content
Threat Feed
Subscribe

Tag

Local-Admin

1 brief RSS
medium advisory

Detection of Local Administrator Account Creation via Net.exe

This analytic identifies attackers attempting to establish persistence or escalate privileges by using net.exe to add users to local administrator groups.

persistence privilege-escalation windows net-exe local-admin
1r 1t