D3-LAM

Detect
Local Account Monitoring

Definition

Analyzing local user accounts to detect unauthorized activity.

Artifact Relationships

This defensive technique relates to specific digital artifacts.

analyzes
Local Account Monitoring
Local User Account

References

Reference - Audit User Account Management Reference - CAR-2016-04-004: Successful Local Account Login Reference - OS Query Windows User Collection Code