hunting-for-t1098-account-manipulation
0
Hunt for MITRE ATT&CK T1098 account manipulation including shadow admin creation, SID history injection, group membership changes, and credential modifications using Windows Security Event Logs.
Install this skill
Run this command in your terminal. No account required — it auto-detects your AI tool and installs the skill file.
npx @skills-hub-ai/cli install cybersecurity-skills-hunting-for-t1098-account-manipulationOr download directly:
View all CLI commands →Setup by platform
Instructions
Security
Loading security scan...