Detect Password Spraying With Windows Event Log Correlation

 

 

 

 

What is Password Spraying?

Password spraying is when an attacker tries many different user accounts with the same password. Passwords attackers tend to use are common ones that the service desk will give out for password resets such as “Spring2018!” This typically avoids locking out accounts and the attacker can try every username he or she has. Continue reading “Detect Password Spraying With Windows Event Log Correlation”