View source for HIDS 5559

{{Infobox
|header1 = Rule 1
|label2 = Status
|data2 = Active
|label3 = Alert Message
|data3 =  PAM event
}}  

= Description =

Authentication failure detected. 


== What you should do ==

This is a single atomic login failure event. It is used for composite rules to detect brute force attacks. It may indicate an attack, or it could be a simple user error. No actions recommended.


= Troubleshooting =

== False Positives ==

There are no false positives with this rule.

== Tuning Guidance ==

There is no guidance for tuning this rule, this is a generic  error and the rule should not be disabled.

= Additional Information =

== Support ==

If you are unsure about how to respond to this alert, please contact Atomicorp support.  We're here to help you!

== Similar Rules ==

None.

== Knowledge Base Articles== 

None.

== Outside References == 

None.

== Notes ==