View suspicious logins
You can use the Suspicious Logins map to review login attempts that Arctic Wolf® considers suspicious.
Suspicious login attempts consist of:
- Successful logins from a restricted country.
- Failed logins from an approved or restricted country.
Your organization typically has a list of countries that are approved for logins. Any login attempt that is not on the list of approved countries appears on this map. Contact your Concierge Security® Team (CST) at security@arcticwolf.com if you want to update this list.
Sign in to the Arctic Wolf Unified Portal.
The Suspicious Logins widget is visible on the 
Home page.
Tip: To view login attempts in greater detail, see Data Explorer.