Hello,
Recently one of the account got locked out but it took time to realize that it did. Is there anyway to get account lockdown alert to mail or anydashboard?
hello, you could create an alert for event id 4740 from the asset authentication logs or maybe even a result!=SUCCESS depending on how you want to tune the alert.
https://www.ultimatewindowssecurity.com/securitylog/encyclopedia/event.aspx?eventID=4740
https://docs.rapid7.com/insightidr/generic-windows-event-log/
1 Like