Search and filter across all detection sources
97 rules
Courier logout/timeout.
sshd: connection timed out
Serv-U: Session timeout
FTPD: User disconnected due to time out.
proftpd: Remote host disconnected due to inactivity.
Windows: Session reconnected/disconnected to winstation.
proftpd: Remote host disconnected due to time out.
proftpd: Remote host disconnected due to login time out.
pure-ftpd: FTP user logout/timeout
Dropbear: User disconnected.
Dropbear: Client exited before authentication.
Remote access login success
Windows: Remote access login success.
Dropbear: Bad password attempt.
Remote access login failure
Windows: Remote access login failure.
Windows: Logon Failure - Specified account expired.
Windows: User account changed.
PAM: User changed password.
Windows: Logon Failure - Account logon time restriction violation.
Dropbear: brute force attempt.
Dropbear: User successfully logged in using a password.
Windows: Group Account Changed
Windows: General account database changed.
Windows: Security enabled group created.