A Indicator of Attack that involves frequent or unexpected lockouts specifically for privileged accounts.