You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
"description": "Security: Authentication - Looks for an unusually large spike in authentication failure events. This can be due to password spraying, user enumeration, or brute force activity and may be a precursor to account takeover or credentialed access.",
"groups": ["security", "authentication"],
"analysis_config": {
"bucket_span": "15m",
"detectors": [
{
"detector_description": "Detects high count of logon fails.",