[T1087.002] Account Discovery - Domain Accounts

Detect Windows net.exe/net1.exe commands used to enumerate domain users or groups, mapped to MITRE ATT&CK T1087.002.