Skip to main content
Skip table of contents

Pattern 6 : Password Accepted

Classification

Rule Name

Rule Type

Classification

Common Event

General Audit FailureSub RuleErrorGeneral Audit Failure
Authentication Failure Bad PasswordSub RuleAuthentication FailureAuthentication Failure Activity
Keyboad Interactive Login FailureSub RuleAuthentication FailureAuthentication Failure Activity
Publickey Login FailureSub RuleAuthentication FailureAuthentication Failure Activity
Authentication Login FailureSub RuleAuthentication FailureAuthentication Failure Activity
SSH2 Secure Login Failure : Bad PasswordSub RuleAuthentication FailureUser Logon Failure : Bad Password
SSH2 Secure LoginSub RuleAuthentication SuccessUser Logon
Pattern 6 : Password AcceptedBase RuleAuthentication SuccessAuthentication Activity
Linux : SSH Session OpenSub RuleAuthentication SuccessAuthentication Activity
Accepted Password For AuthenticationSub RuleAuthentication SuccessAuthentication Activity
SSH2 Secure Login FailureSub RuleAuthentication FailureUser Logon Failure

Mapping with LogRhythm Schema  

Device Key in Log MessageLogRhythm SchemaData Type
N/A<severity>Text\String
N/A<sip>Number
N/A<dname>Text\String
N/A<sport>Number
N/A<login>Text\String
N/A<sessiontype>Text\String
N/A<process>Text\String
N/A<processid>Number
N/A<object>Text\String
N/A<objectname>Text\String
N/A<tag1>Text\String
N/A<tag2>Text\String
JavaScript errors detected

Please note, these errors can depend on your browser setup.

If this problem persists, please contact our support.