Query
[T1087.002] Account Discovery - Domain Accounts - Win
LogScale · Detection & Monitoring · v1 · @sebastian · 25.7.2026
Community LogScale query imported from CrowdStrike/logscale-community-content. Source file: Queries-Only/Queries/[T1087.002] Account Discovery - Domain Accounts - Win.logscale. Origin URL: https://github.com/CrowdStrike/logscale-community-content/blob/main/Queries-Only/Queries/%5BT1087.002%5D%20Account%20Discovery%20-%20Domain%20Accounts%20-%20Win.logscale
DetectionEndpointWindows
Query contentv1
Download v1Loading editor…
Version history
Every save keeps the previous content. Open any version to view or download it.