T1078.003 – Valid Accounts: Local Accounts
Blog
,
Scenario
Detect SSH login after social engineering
Detecteam
2023-09-21
MITRE ATT&CK