net.exe/net1.exe Domain and Local Group Enumeration Reconnaissance
Detects the usage of net.exe or net1.exe to enumerate domain users, groups, local administrators, and domain controllers, which is frequently indicative of post-compromise reconnaissance.
SentinelOne
