home/categories/system-admin/mukul975-anthropic-cybersecurity-skills-skills-hunting-for-t1098-account-manipulation-skill-md
system-admintools

hunting-for-t1098-account-manipulation

Hunt for MITRE ATT&CK T1098 account manipulation including shadow admin creation, SID history injection, group membership changes, and credential modifications using Windows Security Event Logs.

mukul975
maintainer
mukul975
Обновлено 06.04.2026
Звёзды
4240
Форки
464
quick start

Installation and usage

Hunt for MITRE ATT&CK T1098 account manipulation including shadow admin creation, SID history injection, group membership changes, and credential modifications using Windows Security Event Logs.

Установка
$ install --globalskills.sh
Использование

После установки вы можете использовать этот skill, выполнив следующую команду в терминале:

skills use hunting-for-t1098-account-manipulation