5 By Energy SOAR Best practice SOAR 19 Oct: How to handle new local admin account alerts? It’s important to track suspicious administration activities such as newly created accounts that have been elevated to local administrators.
