Failed Event

Failed Event

Base Rule

Authentication Failure

Authentication Failure Activity

Failed Keyboard-Interactive

Sub Rule

Authentication Failure

User Logon Failure : Bad Password

Failed Password

Sub Rule

Authentication Failure

User Logon Failure : Bad Password

Failed None

Sub Rule

Authentication Failure

User Logon Failure

Failed Publickey

Sub Rule

Authentication Failure

User Logon Failure

N/A

<severity>

Text/String

N/A

<vmid>

Text/String/Number

N/A

<tag1>

Text/String

N/A

<login>

Text/String

N/A

<sip>

Ip Address

N/A

<sport>

Number

N/A

<protname>

Text/String/Number

N/A

<object>

Text/String/Number