Windows EventWarning
Windows Event ID 4649 – Microsoft-Windows-Security-Auditing: A replay attack was detected
Event ID 4649 indicates Windows detected a potential Kerberos replay attack where authentication credentials were reused maliciously. This security audit event requires immediate investigation to prevent unauthorized access.
