2 Replies Latest reply on Nov 29, 2016 3:56 PM by rmetzger

    Report for local user logons

    zakhter

      Hi All,

      Need to generate a report on local accounts logon.  Where Host = Domain.

       

      This is to prevent sneaky admins logging onto domain members with locally created accounts.

       

      Not sure if a watch list or correlation rule should be created.

       

      Regards,