VIP account more than 6 failed logons in 10
VIP Account with more than 6 failed logon attempts in 10 minutes, include your own VIP list in the table below NTSTATUS codes -…
Description
VIP Account with more than 6 failed logon attempts in 10 minutes, include your own VIP list in the table below NTSTATUS codes - https://docs.microsoft.com/openspecs/windows_protocols/ms-erref/596a1078-e883-4972-9bbc-49e60bebca55
Detection logic
Detection requirements
- Log source product
- securityeventswindowssecurityevents
- Log source service
- securityevent
MITRE ATT&CK mappings
Not mapped to ATT&CK.
No references are available for this detection.
From the source
- At source
- Open at source
- Upstream identifier
- 892cd37e-f9e1-49c3-b0b2-d74f52ac7b71
- Tagged by the source as
- CredentialAccess
Licence
- Published under
- MIT LicenseRead the licence
- Attribution
- Required
- Obtained under
- MITRead the origin licence
Authorship
- Published
- Sep 1, 2026
- Version
- 1