User account creation disguised in a computer account

Detects scenarios where an attacker creates a user account that fakes a computer account.