Educause Security Discussion mailing list archives

AD Logs


From: Frank Barton <bartonf () HUSSON EDU>
Date: Mon, 27 Nov 2017 10:54:34 -0500

Good morning folks,
  I was going through our logs from last week, and I noticed something
rather odd. Starting last Tuesday, our DCs started logging a huge increase
in successful-computer-login events. to the tune of 25x the number from
before.

I haven't been able to narrow this dow to anything specific, or to any
specific host on the network.

Has anybody else seen anything like this before?

Thank You
Frank

-- 
Frank Barton
Security+, ACMT
IT Systems Administrator
Husson University

Current thread: