app for monitor invalid logins.

[maclover]

Does anybody know app for detecting invalid logins to system?

[kriegvision]

Go to Applications -> Utilities -> Console. In the logs list on the left hand side of the window, go to FILES -> /private/var/log -> secure.log. In the secure.log file search for anything that says "Failed to determine Kerberos principal name." That's what's written to the log when an invalid login is attempted.

You may have several secure.log files like secure.log.0 and secure.log.1 etc... these are past archives and it goes back really far.

[maclover]

I know about it. but i need in application, which take isight snapshots when logins are invalid.

[Turboladdade]

There was an application called AuthSight that did this but it doesn't work under Snow Leopard.