Authentication Failed Alerts

Is anyone receiving flooding alerts for authentication failed Kerberos logins?


this alert is newly added detection for our MDR Customers. If you are seeing issues with the volume of alerts I’d recommend you raise this for review with your Customer Advisor.

Theres a possibility we need to tune/exclude certain behaviors depending on the root cause of this flood of alerts


Thanks David Appreciated !!