windows-failed-logon-investigation Hands-on Windows security lab investigating failed login attempts using Event Viewer and Event ID 4625.