The IT Security team has identified that there is an ongoing credential stuffing attack on many of their organization’s system.
What is the BEST way to find recent and ongoing login attempts to Snowflake?
The IT Security team has identified that there is an ongoing credential stuffing attack on many of their organization’s system.
What is the BEST way to find recent and ongoing login attempts to Snowflake?
To find recent and ongoing login attempts in Snowflake, the best approach is to query the LOGIN_HISTORY view in the ACCOUNT_USAGE schema in the SNOWFLAKE database. This view provides details about login events and is designed for monitoring and auditing purposes. It offers the necessary information required to track login attempts, including the time of login, user information, and success or failure status.
Key word here : way to find recent and ongoing login attempts . So can't be the B answer, as there is lag (2 or 3 hours) in the account_usage view. Answer is A.
LOGIN_HISTORY is not in the information schema it's part of ACCOUNT_USAGE https://docs.snowflake.com/en/sql-reference/account-usage/login_history
the most up to date data is here : https://docs.snowflake.com/en/sql-reference/functions/login_history so it is response A
Key word here : way to find recent and ongoing login attempts . So can't be the B answer, as there is lag (2 or 3 hours) in the account_usage view. Answer is A.
https://docs.snowflake.com/en/user-guide/data-load-snowpipe-auto-s3#step-3-configure-security
Should be A
Answer is A and is validated