Elastic Windows Event Explorer


Publisher - Microsoft-Windows-AAD

Event ID 1160

Message:

Logon failure. Status: %{Status} Correlation ID: %{CorrelationID}

Event Data:

# Name In Type
Out Type
1 Status win:HexInt32 win:ErrorCode
2 CorrelationID win:UnicodeString xs:string

Observed Windows Versions:

Version: 0

Fingerprint: KLLOXMJFDP76K