Skip to main content

Use CasesGet Started with Threat Detection, Investigation, and Response (TDIR) Use Case Categories

System Account Activity Scenario

Learn about the Account Manipulation System Account Activity scenario.

A system account is a privileged user the operating system creates when it's installed that is used for purposes the operating system defines. The System Account Activity scenario describes when an attacker manipulates accounts using a system account.

In the Threat Detection, Investigation, and Response (TDIR) Use Case Categories hierarchy, the System Account Activity scenario falls under the Account Manipulation use case.