[T1087.001] Account Discovery - Local Accounts

Detect Windows net.exe/net1.exe commands used to enumerate local users, groups, or local groups, mapped to MITRE ATT&CK T1087.001.