Query
[T1087.002] Account Discovery - Domain Accounts
LogScale · Detection & Monitoring · v2 · @sebastian · 24.7.2026
Detect Windows net.exe/net1.exe commands used to enumerate domain users or groups, mapped to MITRE ATT&CK T1087.002.
DetectionEndpointWindows
Query contentv2
Download v2Loading editor…
Version history
By default each save creates a new version. Overwrites update the current version in place. Open any version to view or download it.