SQL Server - Connection attempt using a disabled account

Detects scenarios where an attacker attempts authenticate to the database using a disabled user accont