2 Replies Latest reply on Nov 29, 2016 3:56 PM by rmetzger

    Report for local user logons


      Hi All,

      Need to generate a report on local accounts logon.  Where Host = Domain.


      This is to prevent sneaky admins logging onto domain members with locally created accounts.


      Not sure if a watch list or correlation rule should be created.