Search and filter across all detection sources
1,092 rules
[SONICWALL] Administrator Login - Commandline login successful
[WINDOWS-AUTH] Login failure - Account login time restriction
[WINDOWS-AUTH] Suspicious network login
[WINDOWS-AUTH] Login failure - User not granted login type
[CROWDSTRIKE] User Login From Unusual Machine
[DOVECOT] Failed login
[FATPIPE] Login Failed
[FATPIPE] Login Success
[FORTINET] Login accepted
[GCP] Suspicious Login
[HORDEIMP] Failed login
[IMAPD] Successful login
[RIVERBED] Administrator Login
Bitglass - Multiple failed logins
'Detects multiple failed logins.'
[WINDOWS-AUTH] Login failure - User not allowed to login at this computer
[WINDOWS-AUTH] Suspicious network login from non-RFC1918
Logins From Terminated Employees
Allowed Logins from Terminated Employees
API - Suspicious Login
'42Crunch API protection against suspicious login'