Account Name Masquerading as Service Account
Detects creation of accounts with names mimicking legitimate service accounts
Microsoft Sentinel (KQL)

Detects creation of accounts with names mimicking legitimate service accounts

Already have an account?