The new docs.trellix.com offers a modernized UI and AI-powered features like conversational searches. Content is currently available only in English. Other languages will be available in mid-October 2026. We hope you enjoy the new experience.

Press CTRL+K to open search

Failed Logon Activity

  • Published on Sep 11, 2026
  • 1 minute(s) read
Prev Next
Skip to main content

The graph filter can provide a particularly interesting view of failed logons and help identify brute force attacks. Simply filter on status of "Failed".

Related articles
  • Failed logon activity
    Endpoint Security Modules (HX) > Logon Tracker > Endpoint Security Logon Tracker Module User Guide Release 1.2.0 > Common investigative workflows > Hunting for suspicious activity
  • Failed logon activity
    Endpoint Security Modules (HX) > Logon Tracker > Endpoint Security (HX) Logon Tracker Module User Guide 1.3.x > Common investigative workflows > Hunting for suspicious activity
  • Logon Activity at Unexpected Times
    Endpoint Security Modules (HX) > Logon Tracker > Endpoint Security Logon Tracker Module User Guide Release 1.1.9 > Common Investigative Workflows > Hunting for Suspicious Activity