← Alert queue
SL-1018lowBrute force · Beginner · raised Oct 24, 08:45

Account lockout: excessive failed sign-ins

One employee's account locked itself after 14 wrong passwords in seven minutes. Someone guessing the password would cause that. So would a device that keeps trying an old saved password.

Your task: Decide if someone is guessing this password, or if there is a normal reason. Find out where the attempts came from.

Assign this alert to yourself to see the evidence and start investigating.

Found something confusing or unrealistic?