Windows Event ID 4624 with Anonymous Logon. Is it safe?
In our SIEM, I saw the following event below.
From the image above here is what I’m observing:
Successful login noted via eventid 4624
Username used to login was Anonymous logon as indicated by SID S-1-5-7
The redacted Ip address in this… Continue reading Windows Event ID 4624 with Anonymous Logon. Is it safe?