New User Created Via Net.EXE With Never Expire Option

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•0•1

Detects creation of local users via the net.exe command with the option "never expire"