Local Account

Adversaries may attempt to get a listing of local system accounts. This information can help adversaries determine which local accounts exists on a system to aid in follow-on behavior.

Commands such as net user and net localgroup of the Net utility and id and groups on macOS and Linux can list local users and groups. On Linux, local users can also be enumerated using the /etc/passwd file.

Example

By utilizing the Net Users command on CMD we can view the local Accounts