Navigate to http://[Target IP]:8000, open the "Search & Reporting" application, and find through an SPL search against all 4624 events the account name that made the most login attempts within a span of 10 minutes. Enter it as your answer

HTB Content
1

Hey can anybody help me solve this query . I am stuck I dont know whats wrong with the query I run . “index=* sourcetype=WinEventLog:Security EventCode=4624
| bin _time span=10m
| stats count by _time Account_Name
| sort - count
| head 1” . This is the query I ran but got the answer wrong