Failed login Details
How do i find whether the failed login is happened from user login or application or service login is creating these failed attempts ?
Whether logon type gives correct info or any thing can be added ?
- Community Thread
- Forum Thread
- RSA NetWitness Endpoint
- RSA NetWitness Platform
For Windows, Use reference id's to authentication failures.
For other devices, Track Event.Outcome='failure'