Multiple Box login errors

Description

Triggered by multiple login errors against Box authentication. This is for failed logins only. Similar to the "Multiple Box Logins" anomaly.

Content Mapping

This content is not mapped to any local saved search. Add mapping


Use Case

Insider Threat, Security Monitoring, Compliance

Category

Account Compromise, IAM Analytics

Alert Volume

Medium

Journey

Stage 3

Data Sources

Audit Trail