AD Brute Force / Password Spray (NGSIEM)
Detects accounts with multiple authentication failures in Active Directory — indicator of brute force or password spray attacks.
Detects accounts with multiple authentication failures in Active Directory — indicator of brute force or password spray attacks.