Suspected Brute Force attack (Kerberos, NTLM)
Defender for IdentityMicrosoft
Update from:August 2025
- Suspected Brute Force attack (Kerberos, NTLM): Improved detection logic now includes scenarios where accounts were locked during the attacks. As a result, the number of triggered alerts might increase.
