|
hello all .
Actually i want to catch a Wrong Password Attempt to logon a system. Is there any API that can lead me to that event. If there is no then how would i be able to catch that event.
|
|
|
|
|
There is no specific event for that since Windows is not logged on so no applications are running at that time, beyond a few system services. You can learn more about the logon process here[^].
Unrequited desire is character building. OriginalGriff
I'm sitting here giving you a standing ovation - Len Goodman
|
|
|
|
|
Roughly, it should be possible to:
1. Enable Logon auditing in group policy.
2. Subscribe to that particular event using Event Log API's EvtSubscribe[^]
Your program would need to run as a service, because it's possible that noone is logged in at the very moment. I have to little detailed understandiong of the matter toto provide better help, btu that might get you started.
|
|
|
|