// Investigation

Hunt console

Structured search across the normalised event store. Terms combine with AND; prefix a value with ! to negate it.

hunt.queryREADY
Try

Result profile

3

events match

Severity

  • Critical0
  • High0
  • Medium0
  • Low3
  • Info0

Applied filters

  • user = administrator

Matches

Newest first.

Timestamp (UTC)SeverityEvent typeUserSource IPMessage
LowAuthentication Failureadministrator185.100.200.50Pre-authentication failed for administrator from 185.100.200.50 (status 0x18: bad password)
LowAuthentication Failureadministrator185.100.200.50Pre-authentication failed for administrator from 185.100.200.50 (status 0x18: bad password)
LowAuthentication Failureadministrator185.100.200.50Pre-authentication failed for administrator from 185.100.200.50 (status 0x18: bad password)