Windows Security Event Log Analysis — Brute Force Detection (4625), Successful Logon (4624) & Unauthorized Account Creation (4720)

Medium CompTIA Security+ cybersecurity drill: The SIEM triggered a high-severity alert on MEDSRV-03 — a spike in Windows authentication failures followed