Timechart of the status of an Locked Out Account WinEventLog:Security Azeemering 3 0 This query will show a timechart of the status of an Locked Out Account sourcetype="WinEventLog:Security" EventCode=4625 AND Status=0xC0000234 | timechart count by user | sort -count 1 sourcetype="WinEventLog:Security" EventCode=4625 AND Status=0xC0000234 | timechart count by user | sort -count Share This: Tagged: 4625 Security Locked Accountlocked accountSecurityTimechartWindows
