Local System Accounts Discovery - Linux

SigmaHQ Detections@sigmaHQ

•updated Jan 5, 2026•3•0•1

Detects enumeration of local system accounts. This information can help adversaries determine which local accounts exist on a system to aid in follow-on behavior.