D3FEND 技术详情
D3-LAM
定义
Analyzing local user accounts to detect unauthorized activity.
父技术
子技术
无
关联构件
LocalUserAccount
Local User Account
A user account on a given host is a local user account for that specific host.
语义关系
出向analyzesLocal User Account
出向kb referenceReference - Audit User Account Management
出向kb referenceReference - CAR-2016-04-004: Successful Local Account Login
出向kb referenceReference - OS Query Windows User Collection Code