medium10 pts · first answer countswindows-event-logsalert-triage
Reading the logon type
An Event ID 4624 entry shows the field below. How did the user log on?
EventID: 4624 Logon Type: 10 Account Name: svc_backup Source Network Address: 203.0.113.44
Discussion 0
Join free to post in the discussion.
Related questions
- What is Windows Event ID 4624?Cybersecurity Analyst
- IOC vs IOACybersecurity Analyst
- False positive or false negative?Cybersecurity Analyst
- What is Sysmon Event ID 1?Cybersecurity Analyst
- Brute force or password spraying?Cybersecurity Analyst
- What a Tier 1 SOC analyst doesCybersecurity Analyst
- Failed logons followed by successCybersecurity Analyst
- Suspicious process tree in EDRCybersecurity Analyst