Track source of ADFS lockouts RRS feed

  • Question

  • I can see the SAML event that a login failed due to the account being locked out on the ADFS server, but I can't find the source of the attempts being made.  Can someone help me trace this out, I think someone is brute forcing my network and need to block them.


    Thursday, September 10, 2020 10:51 PM

All replies