Glossary: Logs and Data Sources for Investigations

Account lockout

Also written: lockout, lockouts

An account being blocked after too many failed sign-ins. Brute force often triggers a lockout, but password spraying stays under the limit on purpose, so a log with no lockouts doesn't prove nothing happened.