https://wiki.atomicorp.com/wiki/index.php?title=HIDS_18180&feed=atom&action=historyHIDS 18180 - Revision history2024-03-28T14:20:20ZRevision history for this page on the wikiMediaWiki 1.20.2https://wiki.atomicorp.com/wiki/index.php?title=HIDS_18180&diff=6056&oldid=prevMshinn: Created page with "{{Infobox |header1 = Rule 18180 |label2 = Status |data2 = Active |label3 = Alert Message |data3 = MS SQL Server Logon Failure. }} = Description = This rule detects when a us..."2020-08-24T18:33:14Z<p>Created page with "{{Infobox |header1 = Rule 18180 |label2 = Status |data2 = Active |label3 = Alert Message |data3 = MS SQL Server Logon Failure. }} = Description = This rule detects when a us..."</p>
<p><b>New page</b></p><div>{{Infobox<br />
|header1 = Rule 18180<br />
|label2 = Status<br />
|data2 = Active<br />
|label3 = Alert Message<br />
|data3 = MS SQL Server Logon Failure.<br />
}}<br />
<br />
= Description =<br />
<br />
This rule detects when a user login to MS SQL has failed.<br />
<br />
= Troubleshooting =<br />
<br />
== False Positives ==<br />
<br />
There are no known false positives with this rule. If you believe this is a false positive, please report this to our security team to determine if this is a legitimate case, or if its clever attack on your system. '''Do not disable this rule.'''<br />
<br />
Instructions to report false positives are detailed on the [[Reporting False Positives]] wiki page. If it is a false positive, we will fix the issue in the rules and get a release out to you promptly.<br />
<br />
<br />
= Additional Information =<br />
<br />
== Similar Rules ==<br />
<br />
None.<br />
<br />
== Knowledge Base Articles== <br />
<br />
None.<br />
<br />
== Outside References == <br />
<br />
None.<br />
<br />
== Notes == <br />
<br />
None.</div>Mshinn