easy5 pts · first answer countsidentity-securitywindows-event-logs
Event for a failed Kerberos pre-auth
On a domain controller you want to see Kerberos sign-ins that failed because of a wrong password. Which Security event ID do you look for?
Discussion 0
Join free to post in the discussion.
Related questions
- Which login is really two-factor?Cybersecurity Analyst
- Why passwords are saltedCybersecurity Analyst
- What is Windows Event ID 4624?Cybersecurity Analyst
- What is Sysmon Event ID 1?Cybersecurity Analyst
- Brute force or password spraying?Cybersecurity Analyst
- Windows event for an account lockoutCybersecurity Analyst
- Windows event for a new serviceCybersecurity Analyst
- Missing command lines in 4688Cybersecurity Analyst