A user account was locked
| Parameter | Value |
|---|---|
| Subject | user |
| Activity | lock |
| Activity Type | user-lock |
| Pretty Name | User Lock |
| Success | Fail |
|---|---|
| account-lockout |
account-lockout |
The possible fields for this activity type will vary depending on whether the activity was a success or a fail.
| Field | Core | Detection | Informational |
|---|---|---|---|
| local_user_name | |||
| user | ✓ |
| Field | Core | Detection | Informational |
|---|---|---|---|
| failure_code | ✓ | ||
| local_user_name | |||
| failure_reason | ✓ | ||
| user | ✓ |