New Events Ripper Plugins

The mssql.pl plugin primarily looks for MS SQL failed login events in the Application Event Log. I'd engaged in a response where we were able to validate the failed login attempts first in the MS SQL error logs, but then I learned that the events are also listed in the Windows Event Log, specifically the Application Event Log, and I wanted to provide …

analyst application error event events insight lists log login login attempts logs mssql plugin plugins response sql usernames windows