How to handle new local admin account alerts?

It’s important to track suspicious administration activities such as newly created accounts that have been elevated to local administrators.