Malicious activity

New User Added to Local Administrators Group

Platform(s)

  • N/A

Compliance Frameworks

Description

This alert indicates that a new user account has been added to the local administrator group on a Windows system. The local administrator group is a powerful group that has full control over the system, including the ability to install software, modify system settings, and access sensitive data.
Need help?

Get a free Security Risk Assessment. Start today

Orca Security Demo Demo the Orca Platform-> In just 10 minutes, you’ll see how Orca Security can revolutionize your cloud security strategy. Watch a recorded demo from a cloud security expert now.