Enumeration of users and groups (Normalized Process Events)

'Finds attempts to list users or groups using the built-in Windows 'net' tool '