Local Account
- ID :
T1087.001 - Tactic :
Discovery - Platforms:
Windows,linux,macos
Local Account
Adversaries may attempt to get a listing of local system accounts. This information can help adversaries determine which local accounts exist on a system to aid in follow-on behavior.
Exploitations
Windows
Command Prompt
Users
We can list local user accounts in windows os by executing the following command in command prompt.
1
2
3
net user
or
1
2
3
dir C:\Users\
Above images show the listing of local user accounts.
Groups
We can list available groups in windows os by executing the following command in command prompt.
1
2
3
net localgroup
Above image shows the listing of groups.
Powershell
Users
We can list local user accounts in windows os by executing the following command in powershell.
1
2
3
get-localuser
Above image shows the listing of local user accounts.
Groups
We can list available groups in windows os by executing the following command in powershell.
1
2
3
get-localgroup
Above image shows the listing of groups.
Linux
Users
We can list local user/system accounts in linux os by executing this command.
1
2
3
cat /etc/passwd
Above image shows the listing of local user/system accounts.
Groups
We can list available groups in linux os by executing this command.
1
2
3
groups
