I want to set up an email alert when there is a failed log in on a domain server (event id 4625).
I have been readinghttps://community.spiceworks.com/topic/1064488-email-alert-for-failed-login-attempts?page=1 which has some info in, but some of the links are not working anymore, specifically the link to send an email via powershell.
I want to be able to receive an email with the attempted user name and which server it was from. I intend setting this up on every server so that I can see if any local accounts are trying to be used as well.
TIA.
