Good day,

I am currently attempting to create a report within ADAudit Plus that checks for suspicious logon activity. Effectively, what I'd like to do is have a report that says "if user X has failed logon three or more times within a five minute timeframe, report it." Is it possible to have a "greater than or equals to" criteria in place on a custom report, as well as to set a timeframe for such criteria being met? Thanks in advance for your response.