Windows Security Log Event ID 4625 - This Tech Byte
https://thistechbyte.com/windows-security-log-event-id-4625-what-it-is-and-how-to-use-it-to-improve-your-threat-detection/
webEvent ID 4625 – The best method for boosting domain security against failed logon attempts. A failed logon attempt is indicated by the event with the ID 4625 in the Windows Security Log. When a user enters improper credentials, such as a bad username or password, or when the user account is locked out or disabled, this event is triggered.
DA: 99 PA: 72 MOZ Rank: 36 Up or Down: Up