I'm using NW 11 and i have mor than 13.000 alert for Multiple Failed Privilege Escalations by Same User alerts.
What kind of alert is this one? How can i investigate it?
At the same time i have more than 15.000 alerts for Multiple Account Lockouts From Same or Different Users. I relaize thats about users who failed the autentication in an account. But how can i know if its their personal account, which machine have the tried do login, etc...