Quantcast
Channel: THWACK: Message List - Security Event Manager (SEM) - Formerly Log & Event Manager
Viewing all articles
Browse latest Browse all 5385

Re: Alert on login attempts of disabled accounts

$
0
0

Thank you so much for the reply.  With your help I think I am almost there.  The thing I have right now is that in the correlations it says (UserAuthTicket.ExtraneousInfo=”0x12”)  I clicked on the “=” to try to change it to something like ‘contains’ but I only get equal and not equal.  Do I use wildcards instead?

 

Arch

 

<http://www.swri.org/>

 

Arch Stockton | Group Leader - R&D

Information Systems Support Group | Division 10 Operations

Southwest Research Institute | 6220 Culebra Rd. San Antonio, TX 78238-5166

(210) 522-5861 | arch.stockton@swri.org<mailto:arch.stockton@swri.org>


Viewing all articles
Browse latest Browse all 5385

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>