Add Local Account to Local Administrators Group
Detects local accounts being added to the Administrators group using net.exe, net1.exe, or cmd.exe.
YARA-L

Detects local accounts being added to the Administrators group using net.exe, net1.exe, or cmd.exe.

Already have an account?