Correlation Searches 101

In Part 2 of this series, you built a search that found users with an unusually high number of failed logons. That's a genuinely useful search — but on its own, it has a hard ceiling. A user might hav