LinkedinTryHackme

Security Monitoring & SIEM Fundamentals

Failed Logon Attempts (All Users)Failed Logon Attempts (Disabled Users)Successful RDP Logon Related To Service AccountsUsers Added Or Removed From A Local Group (Within A Specific Timeframe)
PreviousDefensive SecurityNextFailed Logon Attempts (All Users)