Suspicious Manipulation Of Default Accounts Via Net.EXE — Detection Rule

Detects suspicious manipulations of default accounts such as 'administrator' and 'guest'. For example 'enable' or 'disable' accounts or change the password...etc

Read the full analysis on IntelFusions