Agent Skills: hunting-for-t1098-account-manipulation

Hunt for MITRE ATT&CK T1098 account manipulation including shadow admin creation, SID history injection, group membership changes, and credential modifications using Windows Security Event Logs.

UncategorizedID: plurigrid/asi/hunting-for-t1098-account-manipulation

Author

plurigrid

https://github.com/plurigrid View all skills

Repository

plurigrid/asi

plurigridLicense: MIT

165

Install this agent skill to your local

pnpm dlx add-skill https://github.com/plurigrid/asi/hunting-for-t1098-account-manipulation

Skill Files

Browse the full folder contents for hunting-for-t1098-account-manipulation.

Download Skill

Loading file tree…

Select a file to preview its contents.