Hidden local account creation
Identifies the creation of a hidden local account. Adversaries can create hidden accounts by appending the dollar sign to the account name. This technique renders the account name hidden to user enumeration tools such as `net user` and effectively bypasses detections.
- Plataforma: Windows
- Severidad: High
- Táctica MITRE: Persistencia
- Técnicas MITRE: T1136, T1136.001