Quantcast
Viewing all articles
Browse latest Browse all 12072

how to determine the destination port from a audit fail event

I have a bunch of audit failure events (4625) in our security log. The details only show the source address and port but no destination port info.. Is there anyway I can find out that info.? What I really want to know is what application\port does these login try to authenticate into.. 

Thanks


Viewing all articles
Browse latest Browse all 12072

Trending Articles