Is there any default rule in LEM to detect below attacks? If not with default, How can we create custom rules for them?
BruteForce Attack
Directory Harvesting Attack
InValid TCP Traffic