Critical Non Impact
CryptoPrevent Monitor Service- Not In Running State
CryptoPrevent Monitor Service- Not In Running State [Unexpected]
This alert condition indicates when user attempted to logon and it failed more than 25 times in 10 minutes.
Discription: AIS Monitoring Platform detected that security log on this system is cleared. Event 1102 is logged whenever the Security log is cleared, REGARDLESS of the status of the Audit System Events audit policy. The Account Name and Domain Name fields identify the user who cleared the log. Impact: Administrators will not able to analyze backdated events for if tracing is required.
This alert condition indicates when security profile threshold was breached.