Skip to main content

Use CasesGet Started with Threat Detection, Investigation, and Response (TDIR) Use Case Categories

Account Manipulation Use Case

Learn about the Account Manipulation use case and what Exabeam functionalities protect against it.

The Account Manipulation use case describes when an attacker creates or manipulates a user or group to maintain access to a network.

In the Threat Detection, Investigation, and Response (TDIR) Use Case Categories hierarchy, the Account Manipulation use case is categorized under the Compromised Insiders use case category. It contains specific scenarios, including:

In Case Manager, use the out-of-the-box Account Manipulation incident type to standardize incident fields, phases, and tasks for account manipulation incidents.

View more information privileged activity and tips on configuring the use case on the Exabeam Community.