https://community.logicmonitor.com/forum/archive-17/topic/eventsource-rdp-brute-force-detection-3380/?focus_post=3373
EVENTSOURCE - RDP Brute Force Detection | Archive | LogicMonitor Community
Nov 20, 2017 - Used to detect for event id's of 4776 and 4625 in the security logs XDYCH4
brute force detectioneventsourcerdparchivelogicmonitor
https://blog.tedroche.com/2006/09/10/bfd-brute-force-detection-vs-script-kiddies/
BFD Brute Force Detection vs. script kiddies | Ted Roche's weblog
brute force detectionscript kiddiesbfdvsted