Account Lockout — Detection Rule

Identifies user account which has been locked because the user tried to sign in too many times with an incorrect user ID or password.