<< PREVIOUS                     NEXT >>

 

AUTHENTICATION FAILURES

 

AUTHENTICATION FAILURE

  1. Code: 37

  2. Brief Description: Authentication Failure

  3. Sample log message:

    1. CEF format

       

      Jul 20 06:30:25 10.16.6.4 CEF: 1|Virsec Security Platform|Virsec|1.3.0|37|InsiderProtect|8|EventId=VS-ATFL-072020-T01060|Application_Name=Win_Webgoat_10_job 1 Server_Name=win_webgoat_10 Incident_Level=THREAT Incident_Category=AUTH_FAILURE Incident_Type=InsiderProtect Incident_Timestamp=20 Jul 2020 10:31:13 AM UTC Session token id=7012e093-658c-4da0-8ebc-425d38ed58d4 Attacker IP=10.16.3.114 User=webgoat HTTP Request=/webgoat/attack pid=3916 description=InsiderProtect category=Authentication Failure eventTime=2020-07-20 10:31:16.780 tid=37

    2. CEF - Fixed Key Definition format

       

      Sep  8 09:37:08 10.16.6.4 CEF: 1|Virsec Security Platform|Virsec|1.4.0|37|InsiderProtect|8|EventId=VS-ATFL-090820-T00078|cs1Label=Application_Name cs1=Win_Webgoat_10_job 8 cs2Label=Server_Name cs2=win_webgoat_10 cs3Label=Incident_Level cs3=THREAT cs4Label=Incident_Category cs4=AUTH_FAILURE cs5Label=Incident_Type cs5=InsiderProtect cs6Label=Incident_Timestamp cs6=08 Sep 2020 01:38:35 PM UTC cs7Label=Session token id cs7=8aa20498-d51b-47db-b1ee-bd6c421c6cdd cs8Label=Attacker IP cs8=10.16.3.114 cs9Label=User cs9=webgoat cs10Label=HTTP Request cs10=/webgoat/attack cs11Label=pid cs11=5104 cs12Label=description cs12=InsiderProtect cs13Label=category cs13=Authentication Failure cs14Label=eventTime cs14=2020-09-08T01:38:16.016-07:00 cs15Label=tid cs15=38

 

<< PREVIOUS                     NEXT >>