OSIR
OffSec Incident Responder (OSIR, IR-200)
Siem Investigation SplunkEnglish
Exam overviewPractice session
Which Splunk SPL query is the most direct way to count failed Windows interactive logons by source workstation in the last 24 hours?
Loading your practice session…