How can we monitor misused login attempts (both – Windows and SQL Server) and track logon anomalies?

Please read the latest MSSQLTips post: “Custom Intrusion Detection Reporting for SQL Server“.

Check out all of my tips here: http://www.mssqltips.com/sqlserverauthor/94/svetlana-golovko/.