Qradar Filters and Searches

Поделиться
HTML-код
  • Опубликовано: 27 окт 2024

Комментарии • 2

  • @CAUGokulan
    @CAUGokulan 7 месяцев назад

    How to fetch the Password change logs for users?

    • @geek2gether469
      @geek2gether469  7 месяцев назад

      Yes you can. you want to filter to the windows event id 4724. Which is the event number used anytime a user attempts to change their user account password.