Windows Anonymous User Login

Detects successful anonymous user logins on Windows systems. This activity can be legitimate for accessing public resources but is also commonly used by attackers for enumeration and unauthorized access (e.g., ZeroLogon).