Query
[T1087.001] Account Discovery - Local Accounts
LogScale · Detection & Monitoring · v1 · @sebastian · 24.7.2026
Detect Windows net.exe/net1.exe commands used to enumerate local users, groups, or local groups, mapped to MITRE ATT&CK T1087.001.
DetectionEndpointWindows
Query contentv1
Download v1Loading editor…
Version history
By default each save creates a new version. Overwrites update the current version in place. Open any version to view or download it.