Skip to main content

Use CasesGet Started with Threat Detection, Investigation, and Response (TDIR) Use Case Categories

Disabled Account Activity Scenario

Learn about the Privileged Activity Disabled Account Activity scenario.

The Disabled Account Activity scenario describes when an attacker obtains a disabled account's credentials so they can operate unnoticed.

In the Threat Detection, Investigation, and Response (TDIR) Use Case Categories hierarchy, the Disabled Account Activity scenario falls under the Privileged Activity use case.