Password_Logon_Initial_Auth_Using_Password_(Login_Failed)_Office 365_Azure Active Directory

Event

Password Logon Initial Auth Using Password (Login Failed) (PasswordLogonInitialAuthUsingPassword)

SK4 unified event:
Connector/Service

Office 365/Azure Active Directory

SK4 Version:

2.3.85

Created Date:

Sun Dec 02 2018 13:14:15 GMT+0000 (Coordinated Universal Time)

Last Update:

Tue Jun 18 2019 11:14:58 GMT+0000 (Coordinated Universal Time)

Category

Access

Description

Failed to login. Credentials have been blocked.

Search query

cef_vendor="skyformation" cef_name="login-failed" destinationServiceName="Office 365" sourceServiceName="AzureActiveDirectory" request="Failure" reason ="*The credential is blocked.*"

Parsed CEF
Unparsed raw data

Expand to see an example...

Audit sources