MITRE D3FENDdefensive technique
D3-DAM Domain Account Monitoring
- Tactic
- Detect
Definition
Monitoring the existence of or changes to Domain User Accounts.
Related
Counters · MITRE ATT&CK (9)
- T1078.002 Domain Accounts sub-technique
- T1087.002 Domain Account sub-technique
- T1136.002 Domain Account sub-technique
- T1098.002 Additional Email Delegate Permissions sub-technique
- T1098.003 Additional Cloud Roles sub-technique
- T1136 Create Account technique
- T1078 Valid Accounts technique
- T1087 Account Discovery technique
- T1098 Account Manipulation technique
Child of · MITRE D3FEND (1)
- D3-UBA User Behavior Analysis defensive technique
References
- https://docs.microsoft.com/en-us/windows/security/threat-protection/auditing/audit-user-account-management Audit User Account Management