Quantcast
Viewing all articles
Browse latest Browse all 5385

correlation rule for windows login

Dear Friends,

 

I just want to create a rule for windows domain controller login attempt.

if three failed attempts from same machine and then passed logon attempt from same machine, should alert a rule.

 

Please help..


Viewing all articles
Browse latest Browse all 5385


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>