topic Correlation search for Interactive Login with Service Account and Interactive Login with Local Administrator in Splunk Search https://community.splunk.com/t5/Splunk-Search/Correlation-search-for-Interactive-Login-with-Service-Account/m-p/467596#M191889 <P>Offense Name: Interactive Login with Service Account<BR /> Rule: Service accounts typically start with svc*</P> <P>Offense Name: Interactive Login with Local Administrator<BR /> Rule: Local admin user is rs0</P> <P>I want correlation search please</P> Tue, 03 Sep 2019 19:40:46 GMT vikram1583 2019-09-03T19:40:46Z Correlation search for Interactive Login with Service Account and Interactive Login with Local Administrator https://community.splunk.com/t5/Splunk-Search/Correlation-search-for-Interactive-Login-with-Service-Account/m-p/467596#M191889 <P>Offense Name: Interactive Login with Service Account<BR /> Rule: Service accounts typically start with svc*</P> <P>Offense Name: Interactive Login with Local Administrator<BR /> Rule: Local admin user is rs0</P> <P>I want correlation search please</P> Tue, 03 Sep 2019 19:40:46 GMT https://community.splunk.com/t5/Splunk-Search/Correlation-search-for-Interactive-Login-with-Service-Account/m-p/467596#M191889 vikram1583 2019-09-03T19:40:46Z