Alert Logic Log Manager (Search > Log Messages) has several built-in reports on failed logins. Examples include excessive Windows failed logins, excessive Windows failed logins by Windows, FTP failed logins, UNIX failed logins, and UNIX SSH failed logins. These can also be reported via correlation rules and proactive email alerts, if desired.
Note: This information only applies to Log Manager customers; it does not apply to customers with Managed Detection & Response entitlements.
Comments
0 comments
Please sign in to leave a comment.