Find local accounts being created or modified as well as remote authentication configurations
Read the full analysis on IntelFusions