Fake computer account authentication attempt

'This query detects authentication attempt from a fake computer account(username ends with $). Computer accounts are normally not authenticating via interactive logon or remote desktop neither they are unlocking the systems. Ref: https://blog.menasec.net/2019/02/threat-hunting-6-hiding-in-plain-sights.html'