See matching posts in thread - Event ID: 22
Worth investigating and validating these events. Recommended Score: Number (1-100): 50 Query (example): ( cmdline:"net user" and cmdline:add ) OR ( cmdline:"net localgroup users" ) OR ( cmdline:"net localgroup administrators" ) URL Query (example) : cb.urlver=1&q=((%20cmdline%3A%22net%20user%22%20and%20cmdline%3Aadd%20)%20OR%20(%20cmdline%3A%22net%20localgroup%20users%22%20)%20%20OR%20(%20cmdline%3A%22net%20localgroup%20administrators%22%20))&sort=&rows=10&start=0 Cb Process Tree (attach CB Art here if you have it) (example) : Be sure to set the correct Category below and add Tags that are appropriate
6 Comments - no search term matches found in comments.