Brute Force Protection is configured in the policy settings of your Malwarebytes OneView console. Based on these configurations, the Malwarebytes Endpoint Agent monitors the event log for failed Windows™ protocol login attempts, creates detection events and optionally creates a Windows Firewall rule to temporarily block the incoming IP address.