Skip to content

new: user creation attempt via adsi - #6228

Open
swachchhanda000 wants to merge 2 commits into
SigmaHQ:masterfrom
swachchhanda000:adsi_create_user
Open

new: user creation attempt via adsi#6228
swachchhanda000 wants to merge 2 commits into
SigmaHQ:masterfrom
swachchhanda000:adsi_create_user

Conversation

@swachchhanda000

@swachchhanda000 swachchhanda000 commented Aug 14, 2026

Copy link
Copy Markdown
Collaborator

Summary of the Pull Request

closes #6057 and #6064

Changelog

new: New User Account Creation Attempt Via ADSI in CommandLine
new: New User Account Creation Attempt Via ADSI

Example Log Event

Fixed Issues

SigmaHQ Rule Creation Conventions

  • If your PR adds new rules, please consider following and applying these conventions

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Review Needed The PR requires review Rules Windows Pull request add/update windows related rules

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Coverage gap: posh_ps_create_local_user.yml misses local account creation via ADSI/WinNT provider

1 participant