account_password_changedactivity_dashboard_events_by_actionactivity_dashboard_failed_login_trendsactivity_dashboard_failed_loginsactivity_dashboard_integration_summaryactivity_dashboard_mfa_activityactivity_dashboard_total_eventsgpg_key_createdgpg_key_deletedlogin_failed_attemptslogin_from_unrecognized_devicelogin_with_recovery_codemfa_disabledmfa_method_removedmfa_recovery_code_regeneratedoauth_app_authorization_createdoauth_app_authorization_destroyedpersonal_access_token_grantedssh_key_createdssh_key_deleted
Query: Failed Login Attempts Over Time
Description
Track failed login attempts over time.
Usage
powerpipe query github_security_log_detections.query.activity_dashboard_failed_login_trends
Tailpipe Tables
SQL
select date_trunc('hour', created_at) as "Hour", count(*) as "Failed Logins"from github_security_logwhere action = 'user.failed_login'group by "Hour"order by "Hour" DESC;
Dashboards
The query is used in the dashboards: