Skip to content

[BUG] Kerberos Pre-Authentication Flag Disabled in UserAccountControl #3566

Open
@ljstella

Description

@ljstella

If you have a Splunk Support contract, creating a support case for your issue may result in faster resolution.

Describe the bug

This dataset is still using the multi-line Windows Event Logs

Expected behavior

Regenerate dataset & update search to use XMLWinEventLog

Screenshots

If applicable, add screenshots to help explain your problem.

App Version:

  • ESCU: 5.7.0

Additional context

Add any other context about the problem here.

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions