author: Zach Mathis
date: 2020/11/08
modified: 2021/11/26

title: Logon Failure - Wrong Password
title_jp: ログオンに失敗 - パスワードが間違っている
output: 'User: %TargetUserName%  :  Type: %LogonType%  :  Workstation: %WorkstationName%  :  IP Address: %IpAddress%  :  AuthPackage: %AuthenticationPackageName%'
output_jp: 'ユーザ: %TargetUserName%  :  タイプ: %LogonType%  :  端末: %WorkstationName%  :  IPアドレス: %IpAddress%  :  認証パッケージ: %AuthenticationPackageName%'
description: Prints logon information. 
description_jp: Prints logon information.

id: e87bd730-df45-4ae9-85de-6c75369c5d29
level: low
status: stable
detection:
    selection:
        Channel: Security
        EventID: 4625
        SubStatus: "0xc000006a"
falsepositives:
    - normal system usage
tags:
references:
sample-evtx: ./sample-evtx/DeepBlueCLI/smb-password-guessing-security.evtx
ruletype: hayabusa
