Valid Users Failing to Authenticate From Single Source Using Kerberos
Detects multiple failed logins with multiple valid domain accounts from a single source system using the Kerberos protocol.
Sigma

Detects multiple failed logins with multiple valid domain accounts from a single source system using the Kerberos protocol.

Already have an account?