Suspicious Windows ANONYMOUS LOGON Local Account Created

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•0•0

Detects the creation of suspicious accounts similar to ANONYMOUS LOGON, such as using additional spaces. Created as an covering detection for exclusion of Logon Type 3 from ANONYMOUS LOGON accounts.