MITRE ATT&CK Technique
T1110.004
1 query tagged with this technique.
View on MITRE ATT&CK →
-
Analytics Rules / Password Spray
Detect Low And Slow Password Spray
Low-and-slow spray pattern (Storm-0940-shaped): many unique users from the *same* IP in a day, with roughly one failed attempt per user; includes optional legacy-user-agent hints.