A1001: Active Directory Account
Summary
| ID | A1001 |
|---|---|
| Brief Description | This artifact describes Windows Active Directory user account entity |
| Author | @ERMACK_COMMUNITY |
| Creation Date | 2022/10/22 |
| Modification Date | 2022/10/22 |
| References | |
| Ontology mappings |
|
Description
A domain user account in Microsoft Windows (2000) defines that user's access to a logical group of network objects (computers, users, devices) that share the same Active Directory databases; that is, a user's access to a domain.
Response Actions Implementations
Block domain user account via Powershell
Preparing to block user account via Powershell
Powershell disable AD user
Unblock domain account via powershell
Find account with shadow credential via Powershell
Powershell enable AD user