Net Group Domain Account Addition

Barsha Sketh@Barshasketh

•updated Aug 13, 2026•2•0•5

Detects the addition of new domain accounts using the 'net group /add /domain' command. This activity can be indicative of an adversary establishing persistence or escalating privileges within a domain environment.