Rules Authentication out of working time

Hello Every body,

I need a rule to detect authentication based on the event id 4624 (Windows authentication) out of working time.
do you have any idea about this?


1 Like

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.