Definition

Analyzing local user accounts to detect unauthorized activity.

Artifact Relationships

This defensive technique relates to specific digital artifacts.

References

Reference - Audit User Account Management Reference - CAR-2016-04-004: Successful Local Account Login Reference - OS Query Windows User Collection Code