#logon-failures

1 article

Windows Events1

Security analyst monitoring Windows Event ID 4625 logon failures on multiple security dashboards

Event 4625

Microsoft-Windows-Security-Auditing

Windows EventInformation

Windows Event ID 4625 – Microsoft-Windows-Security-Auditing: An Account Failed to Log On

Event ID 4625 records failed logon attempts in Windows Security logs. This critical security event helps administrators track unauthorized access attempts, brute force attacks, and authentication issues across domain and local accounts.

March 1812 min