value:  Prior to infecting a victim with malware such as Black Kingdom ransomware, attackers will often create domain administrator accounts, achieved through various means such as VPN login with compromised credentials. 
name: Create Account: Domain Account