LogScale Queries

Query

Failed User Logon Thresholding

NG-SIEM · Detection & Monitoring · v2 · @sebastian · 24.7.2026

All Queries

Community LogScale query imported from CrowdStrike/logscale-community-content. Source file: Queries-Only/Helpful-CQL-Queries/Failed User Logon Thresholding.md. Origin URL: https://github.com/CrowdStrike/logscale-community-content/blob/main/Queries-Only/Helpful-CQL-Queries/Failed%20User%20Logon%20Thresholding.md

AuthenticationDetectionEndpointLinuxWindows

Query contentv2

Download v2
Loading editor…

Version history

Every save keeps the previous content. Open any version to view or download it.

  1. v2current

    24.7.2026, 18:53:33

  2. v1

    24.7.2026, 18:53:14