attack_technique: T1078.003
display_name: 'Valid Accounts: Local Accounts'
atomic_tests:
- name: Create local account with admin privileges
  auto_generated_guid: a524ce99-86de-4db6-b4f9-e08f35a47a15

  description: After execution the new account will be active and added to the Administrators group
  supported_platforms:
  - windows
  executor:
    command: |-
      net user art-test /add
      net user art-test Password123!
      net localgroup administrators art-test /add
    cleanup_command: |-
      net localgroup administrators art-test /delete >nul 2>&1
      net user art-test /delete >nul 2>&1
    name: command_prompt
    elevation_required: true
