image-logo
A Day In the Life of a Junior (Associate) Security Analyst
https://siem.internal
Alert Log
Date Message
April 16th 2024, 05:27:00:347 Successful SSH authentication attempt to port 22 from IP address 221.181.185.159
April 16th 2024, 05:25:28:235 Unauthorized connection attempt detected from IP address 221.181.185.159 to port 22
April 16th 2024, 02:43:22:456 The user John Doe logged in successfully (Event ID 4624)
April 16th 2024, 02:43:20:658 Multiple failed login attempts from John Doe
April 16th 2024, 02:30:20:215 Logon Failure: Specified Account's Password Has Expired (Event ID 535)