Local System Accounts Discovery - Linux — Detection Rule

Detects enumeration of local system accounts. This information can help adversaries determine which local accounts exist on a system to aid in follow-on behavior.

Read the full analysis on IntelFusions