Elastic SIEM: Developing Dashboards & Visualization

Views: 24

Use case 1: Failed Logon Attempts (Disabled Users)

Use case 2: Failed Logon Attempts (using Admin Accounts)

Use case 3: Successful RDP Logon Related To Service Accounts

Use case 4: Users Added Or Removed From A Local Group