Account Discovery (Windows Local and Google Cloud Service Accounts)

Account Discovery (ATT&CK T1087) is the enumeration of valid usernames, email addresses, or other account identities on a host or within an authorized environment. ATT&CK separates local, domain, email, and cloud account discovery into sub-techniques. This entry contains two independent, read-only examples: local Windows users (T1087.001) and Google Cloud user-managed service accounts (T1087.004). They are scope-specific procedures, not sequential steps or input/output dependencies; use only the variant or variants authorized for the target host or project.