Tracking unsuccessful login attempts on endpoints

Issue

Is it possible for a customer to track unsuccessful login attempts on Endpoints (not Red Canary login attempts) either in Red Canary or Carbon Black EDR?

For example, failed logins in to their laptops. 

Resolution

It is not currently possible to track failed login attempts.