Increased Failed Authentications Of Any Type — Detection Rule

Detects when sign-ins increased by 10% or greater.

Read the full analysis on IntelFusions