Use Case - Finding New Local Admin Accounts

Purchase

To purchase this eLearning please click "Purchase" below. If you are purchasing for someone else please check "This is for someone else".

The eLearning is free.


FREE

Summary

Often an attack will include the creation of a new user, followed by permissions being elevated to an admin level. In this video we show you how to use Splunk to find these accounts so that you can take action if needed.