Tag
This analytic identifies attackers attempting to establish persistence or escalate privileges by using net.exe to add users to local administrator groups.