Email alerts to destination or source user accounts?

Are email alerts limited to users created within LEM or, is it possible to target the destination or source user accounts of an event?  One use case for this is multiple logon failures which an end user would otherwise be unaware of e.g. still logged on to another computer under an expired password.

We're running LEM v6.1.0.

Thanks