Credential Spray and Authentication Bypass on Network Logon

Detects credential spraying attacks and potential authentication bypass attempts exploiting incomplete access control implementations. Identifies high-frequency network logons from the same source IP and classifies by risk level.