turbot/tailpipe-mod-github-security-log-detections

Query: Failed Login Attempts Over Time

Description

Track failed login attempts over time.

Usage

powerpipe query github_security_log_detections.query.activity_dashboard_failed_login_trends

Tailpipe Tables

SQL

select
date_trunc('hour', created_at) as "Hour",
count(*) as "Failed Logins"
from
github_security_log
where
action = 'user.failed_login'
group by
"Hour"
order by
"Hour" DESC;

Dashboards

The query is used in the dashboards: