Managed Sentinel – Alert 176
Alert ID | MS-A176 |
Alert Name | Password Spraying to SonicWall Admin CLI |
Description | This alert generates when more than 50 different usernames fail to login to the SonicWall admin console from the same IP. |
Severity Level | Low |
Threat Indicator | |
MITRE ATT&CK Tactics | Initial Access |
Log sources | CommonSecurityLog |
False Positives | |
Recommendations |