Free scan↗
  • English
  • Deutsch

DC0010 User Account Modification

Changes made to an existing user, service, or machine account, including alterations to attributes, permissions, roles, authentication methods, or group memberships.

01

detects techniques (21)

ATT&CK techniques this enables or maps to.

  • T1036.010Masquerade Account Name
  • T1098Account Manipulation
  • T1098.001Additional Cloud Credentials
  • T1098.002Additional Email Delegate Permissions
  • T1098.003Additional Cloud Roles
  • T1098.005Device Registration
  • T1098.006Additional Container Cluster Roles
  • T1098.007Additional Local or Domain Groups
  • T1136Create Account
  • T1136.003Cloud Account
  • T1137Office Application Startup
  • T1484.001Group Policy Modification
  • T1484.002Trust Modification
  • T1491.001Internal Defacement
  • T1531Account Access Removal
  • T1548Abuse Elevation Control Mechanism
  • T1556Modify Authentication Process
  • T1556.006Multi-Factor Authentication
  • T1556.007Hybrid Identity
  • T1685.002Disable or Modify Cloud Log
showing 20 of 21
02

source

Where this definition is published.

view on ATT&CK↗
by temnirPrivacySources
Built in Europe© 2026 datadir s.r.o.
v0.1.142checking…