0 Replies Latest reply on Mar 24, 2016 10:29 AM by 1tguy

    Way to monitor User Logins in HIPS?


      There used to be the two signatures that you could set to informational and monitor Windows login attempts but those are no longer used. I am looking for a way to maybe create a custom HIPS signature to view all of the logins on a machine? I was thinking of pointing it to the winlogin.exe process, but not sure. Has anyone else ever done this?