Insider Threat Matrix™Insider Threat Matrix™
  • ID: PR042.001
  • Created: 06th July 2026
  • Updated: 06th July 2026
  • Platforms: WindowsLinuxMacOS
  • MITRE ATT&CK®: T1136.001T1136
  • Contributor: The ITM Team

Local User Account Creation

A subject creates a local user account on an endpoint, server, appliance, or standalone system. Local accounts authenticate directly to the system on which they are created and may provide access without relying on centralized directory, cloud, or federated identity controls.

 

Local user accounts may be created through operating system utilities, administrative consoles, scripts, endpoint management tools, or direct modification of local account stores. Depending on configuration, the account may provide interactive login, remote access, local administrator rights, or access to locally hosted services and data.